The victim receives an SMS for tracking a supposed delivery that is on its way, requesting the download of an app that appears to be from the postal company but contains malicious software.

“It all stems from an opportunity, occasions like Christmas or sales, when the use of online shopping platforms is higher, which makes it difficult for people to filter messages about receiving an item if they haven’t actually ordered anything. Faced with the avalanche, users end up downloading an application believing it to be legitimate,” explains Selva Orejón, from Onbranding, a firm specializing in cyber investigation and digital identity protection.

You can read the full article below or read it in La Vanguardia