malware analysis

How a challan SMS delivered an Android payload

October 5, 2026
android, malware analysis, reverse engineering, smishing

Introduction # I received a message that claimed to come from the transport ministry: Airtel Warning: SPAM | RTO Notice: Your vehicle has an Over Speeding challan BH3969314321 issued on 04-10-2026. Check & Download now: https://echallangovtok.live/app . MoRTH The sender shown on my phone was +91 9108627963. The message supplied a challan number, a date, and a link. I downloaded the response from /app with wget. It was an Android APK. ...