Robuta

https://www.indiatoday.in/technology/news/story/flubot-malware-asks-android-users-to-track-package-delivery-using-link-then-steals-bank-details-1795969-2021-04-28
FluBot is installed via text messages claiming to be from a delivery company that asks users to click a link to track package delivery. The phishing link then...
android userstrack packageflubotmalwareasks
https://www.malwarebytes.com/blog/news/2021/04/watch-out-for-android-flubot-spyware
Notorious Android spyware Flubot is spreading via messages about missed deliveries.
watchandroidflubotspywarespreading
https://www.lookout.com/threat-intelligence/article/flubot-smishing
Attackers are using phone numbers leaked from Facebook to socially engineer mobile users into downloading malicious apps infected with the FluBot banking trojan
threat intelflubotsmishing
https://www.bitdefender.com/en-gb/blog/labs/threat-actors-use-mockups-of-popular-apps-to-spread-teabot-and-flubot-malware-on-android
Spreading malware on Android devices is not easy, as the official store can usually (not always) prevent these types of apps from reaching users.
threat actorspopular appsusemockupsspread