This just in: https://arstechnica.com/information-technology/2022/01/android-malware-can-factory-reset-phones-after-draining-bank-accounts/ https://arstechnica.

This just in: https://arstechnica.com/information-technology/2022/01/android-malware-can-factory-reset-phones-after-draining-bank-accounts/ https://arstechnica.com/information-technology/2022/01/andro... Quote from the article: "The malware spread primarily through Google Play but also through third-party marketplaces, push notifications on compromised websites, sponsored links on Google, and messages delivered by WhatsApp or SMS. At the time, Brata targeted people with accounts from Brazil-based banks." With browser updates, limited browsing, restricting app downloads, you might be in the clear. But looks like malware makers also use WhatsApp or SMS.