Trend Micro Mobile Team observed an uptick in attacks targeting bank customers in India, the common entry point being a text message with a phishing link.
The SMS content urges the victims to open the embedded phishing link or malicious app download page and follow the instructions: To fill in their personally identifiable information (PII) and credit card details to allegedly get a tax refund or credit card reward points.
As of this writing, they observed five banking malware families involved in these attacks, namely Elibomi, FakeReward, AxBanker, IcRAT, and IcSpy.