Phishing emails and text spam are easy to ignore - if you don't recognize the sender, just delete it. That's why a malicious app called Andr/SlfMite-A turns your Android phone's contact list against you.
Here's how it works. Your friend gets a text message from another friend recommending an app. When your friend taps the text message's link, they download a malicious app called MoboGenie. This service claims to be a competitor to Google's Play Store.
Immediately, the app raids your friend's top 20 contacts and sends them, including you, a text message with the link to the same malicious app. If enough people fall for this trick, the app can spread like wildfire.
Luckily, staying safe is simple. First, don't tap on links in text messages. If you want to download an app, visit the app store and download it manually.