The BRATA Android malware has been spotted in Italy, with threat actors calling victims of SMS attacks to steal their online banking credentials. The attack begins with unsolicited SMS text linking a malicious website. This text claims to be a message from the bank urging the recipient to download an anti-spam app. The link leads to a page from where the victim downloads the malware or takes them to a phishing page to enter their banking credentials. This information is then sent to a C2 server of the attackers.”]