A fresh strain of Android malware dubbed Cookiethief s may be implanted prior to users purchasing a device. The malware, dubbed Cookiethief, transfers cookies used by the browser and Facebook app to the cybercriminals server. Cybercriminals are bent on ad fraud, using the hijacked accounts to send out spam on social networks and messengers, Kaspersky researchers said. So far there are about 1,000 victims, but the figure is growing, according to the researchers, who added that they have seen both tactics being used before.
Source: https://threatpost.com/trojan-android-cookie-jars/153678/