Malware dubbed WolfRAT targets messaging apps like WhatsApp and Facebook Messenger to gather intelligence on Android victims. Researchers link the malware to Wolf Research, a Germany-based spyware organization that sells espionage-based malware to governments. Researchers identified at least four major releases of the malware, reflecting that it s under intense development Researchers believe the infection vector was via phishing/smishing links sent to users devices. Once downloaded, the malware poses as legitimate services, such as Google Play apps or Flash updates, by using their icons and package names.
Source: https://threatpost.com/wolfrat-android-malware-whatsapp-facebook-messenger/155809/