VERY IMPORTANT

Roaming Mantis is a malicious campaign that targets Android devices and spreads mobile malware via smishing. Kaspersky has been tracking Roaming Mantis since 2018, and published five blog posts about this campaign. It’s been a while since the last blog post, but Kaspersky has observed some new activities by Roaming Mantis in 2021, and some changes in the Android Trojan Wroba.g (or Wroba.o, a.k.a Moqhao, XLoader) that’s mainly used in this campaign. Furthermore, they discovered that France and Germany were added as primary targets of Roaming Mantis, in addition to Japan, Taiwan and Korea.