Malware called TigerBot is controlled via SMS messages rather than from a command & control server on the Internet. Malware can record phone calls, upload the device’s GPS location, and reboot the phone. It works by intercepting SMS messages sent to the phone and checking to see if they are commands for it to act. If they are, it executes the command and then prevents the message from being seen by the user by hiding itself from the home screen. Researchers at NQ Mobile, working alongside researchers at North Carolina State University, have discovered the malware.
Source: https://thehackernews.com/2012/04/tigerbot-sms-controlled-android-malware.html