Android malware app MoqHao distributed as an alleged Chrome update

A campaign is currently running again in which cyber criminals are trying to bring a malicious app called MoqHao to Android users. Here is a brief information about what it is about.

MoqHao is a malware family that, as a banking Trojan, is often distributed to Android users via SMS (see this McAfee report from 2017). CERT Bund warns against this scam in the following tweet.

⚠️The harmful #MoqHao #Android app is distributed again via SMS link as a supposed Chrome update. When the app is installed, bulk SMS can be sent, among other things. Sample: https: // virustotal.com / gui / file/d3b8f 83f61f589a 5afa6b5114fa95b0 ebbf58f60051deb 306df1ba 55c8840d43 / detection #RoamingMantis

In the current case, the victims received an SMS advertising an alleged Chrome update. If the victim installs the app under the link, the Trojan becomes active on the Android device.