The Cutwail botnet, which has already been spreading the banking trojan known as Zeus, is now also trying to pass around a new Android trojan called Stels. Stels infects Android devices by pretending to be an update for Adobe Flash Player.
...
The disguise has not yet been completely perfected.
...
The trojan can also spy on the victim's contact list, send text messages that cost money, make telephone calls and filter text messages to look for, say, mTANs. Working with a Zeus trojan, Stels could thus potentially get around two-factor authentication.
Seniors targeted in global Facebook scam spreading new Android malware
Fake Avast Antivirus Sites Are Spreading SpyNote Android Malware