Email from CERT NZ just now:

 

A malicious app is being spread through text messages on Android phones and is currently affecting New Zealanders. The text messages are about a parcel delivery pending or been missed, with a link to a delivery service website.

 

Do not click on the link. If you do, it will ask you to install the application for the delivery service, which is actually a malicious app. The application attempts to steal your banking and credit card information as well your contact list, which it uploads to a server to continue spreading itself. Once a device has been infected with this malicious app it can result in significant financial loss.