There’s a new series of malicious Android applications masquerading as a premium security app for the mobile platform, and researchers say that the malware is part of the Zeus empire.

The fake security apps began showing up in researchers’ malware traps in early June and newer versions have continued to pop up throughout the month. The file is called “Android Security Suite Premium ” and its main intent seems to be stealing incoming SMS messages and then sending them off to one of the attacker’s command-and-control servers. Depending upon what apps the victim’s phone has installed, those incoming messages could contain sensitive data such as password-reset links or other information.

Once the malicious app is installed and executed, it will show the user a fake activiation code.

Read the full article over at Threat Post.