Trojan-SMS.AndroidOS.FakeInst.ef targets users in 66 countries, including the US. Trojan can send short messages to premium-rate numbers in 14 countries around the world. FakeInst disguises itself as an application for watching porn videos. The Trojan can do various things with incoming messages steal all of them, delete them, or even respond to them. It can send three messages to the number 97605, each costing about $2, and intercept incoming messages. Most of the Trojan infections were in Russia and Canada.”]
Source: https://securelist.com/an-sms-trojan-with-global-ambitions/59387/