Need an application that will first check the phone information. If it finds the phone is rooted it will continue with the rest of the plan. If it is unrooted, it will see if the android device is possible to be rooted. Most are possible in simplest ways (example: unrevoked.). If the device is vulnerably then it will download the script from my site, root the phone. (there will be a program/script for each device. All the scripts need to be coded BY the developer as well)
The application then needs to uncheck the "don't allow 3rd party apps". After that, it should push an apk file to /system/apps and run it.
At this point, the first installed app will remove itself.
The apk file that was ran from /system/apps will then send an sms message to people in the contacts, and sniff http/s traffic made by the phone. It will dump the sniffed packets to a website.