Trojan-SMS.AndroidOS.Svpeng is capable of phishing as well, trying to harvest financial data of users. Trojan is only attacking clients of Russian banks. Trojan appears to be interested in the following countries: the US, Germany, Ukraine (Ua) and Belarus (By) The Trojan is very careful about protecting itself: It uses DeviceAdmin to prevent the user from disabling DeviceAdmin, the Trojan uses a previously unknown vulnerability in Android. In the same way it tries to prevent resetting of the phone to factory settings.”]
Source: https://securelist.com/the-android-trojan-svpeng-now-capable-of-mobile-phishing/57301/