Google Play app spread SMS trojan for more than a year

An app recently available in the Google Play store claimed to be a download for wallpapers, videos and music, but in reality, it was a SMS trojan app.

The package name “com.FREE_APPS_435.android” tricked victims by getting them to allow the app to access their SMS messages, according to a Malwarebytes blog post. If a user clicked through the app’s Google Play homepage to the developer’s website, they found two banners and links.