Software embedded in apps sends that data automatically to third parties, which send aggregated databackto developers to improve their apps and to advertisers hoping to target the millions of smartphone and tablet users more precisely.
Once the victim received a text message that included a certain protocol, the malware would send the collected databackto the command-and-control server.