So, you ...
1)Have to follow a link to get to a web page
2)Another link on the web page tries to get you to open an MMS message by downloading a piece of software
3)You have to set th epermission to install from unsafe sources to on
4)You have to install that software an run it
5)To have to agree that it can use additional rights to work with graphics
6)You have to turn on th esetting in Android to allow this app ... sorry picture message to draw over other apps
7)You then have to allow this software to become a device administrator
8)Then allow is to send and view SMS messages
9)Then allow it to make phone calls
10) Then access you contacts
11) Then access any other rights it requires and then overlay your banking app, that you happen to have installed
Sometimes you feel that the 'victim' is just asking to be infected!
In other news, a murderer rang up his victim and told him to take a knife out of the top drawer and then stab himself repeatedly with it.