Last month, a number sent me malware via an APK titled 'Union Bank Aadhar Update' on Whatsapp.
These typically just lamely forward all SMSes received to steal OTPs, but this one turned out to be a significantly more sophisticated op.
Some notes from taking down a scam network: