SpyEye distributors are catching up with the mobile market as they (finally) target the Android mobile platform. The Trojan injects fields into a banks Web page and asks customers to input their mobile phone number and the IMEI of the phone. The bank customers are then told the information is needed so a certificate can be sent to the phone and are informed that it can take up to three days before the certificate is ready. The new measure pretends to be an Android application that protects the phone’s SMS messages from being intercepted.”]
Source: https://securityintelligence.com/first-spyeye-attack-android-mobile-platform-now-wild/