Malware has been designed to steal data from mobile instant messaging clients. Malware uses advanced evasion techniques to evade dynamic analysis. Researchers spotted the malware inside a Chinese app named Cloud Module (in Chinese), with the package name com.android.boxa. The malware’s authors may be distributing the malicious app via third-party stores and Android app forums. Researchers have not shared any info on the malware’s distribution methods, but taking into account that the malware has a Chinese name and that there’s no Play Store in China.
Source: https://www.bleepingcomputer.com/news/security/android-trojan-steals-data-from-facebook-messenger-skype-other-im-clients/