just a short news bulletin: https://www.grahamcluley.com/android-banking-trojan-intercept-sms-messages/
Because I got hooked I've searched for the leaked source online and voilà.
Haven't tested it, so I highly recommend you to watch out! It's thought for analysis, not for real-world using! What you're doing with it is up to you, but don't be stupid and try getting it running...