Being distributed through a fake Flash Player app, the malware is designed for stealing login credentials, hijacking SMSs, uploading contact lists and SMSs to malicious servers, reports Romita Majumdar.