Malware is a new Android-based campaign targeting Australian financial institutions. Malware’s credential-harvest mechanism is not particularly sophisticated, it does have an advanced self-preservation mechanism. The information collected by the malware and the control over the victim’s mobile device allows their operators to perform more complex social engineering attacks. If the command and control (C2) server is taken down, the malicious operator can still recover the malware control by sending SMS messages directly to infected devices. This makes the taking down and recovery of the network much harder.”]
Source: https://blog.talosintelligence.com/2019/04/gustuff-targets-australia.html