APK malware attacks usually start with a WhatsApp or SMS from a contact or agency posing as a trusted institution — a bank, ...