Android users must be careful with malware FluBot, which can steal the personal data of its victims. FluBot enters via a message claiming to be from a delivery company. And the perpetrator will send a link to track the delivery package.
This Link is Phishing
Like any other crime, the link is phishing and prompts the user to install an application to follow fake shipment tracking. Unfortunately, this application is malware that steals information on previously infected Androids.
The download must take place on the APK file, which is usually blocked by default to protect Android users from attacks. However the website has information on bypassing protection and getting FluBot installed.
FluBot is able to access the victim’s address book and allows sending infected messages to all contacts. This is done to spread malware again and can spread very quickly, as quoted from Zdnet, Tuesday (27/4/2021). In addition, Flubot can also steal information such as passwords, online bank details and personal information.
Apple Users Must Also Be Alert
Even though FluBot only infects Android devices, Apple users are also asked to be vigilant. Especially in messages asking them to click on a link regarding submissions. It’s as malicious Web sites can be used to steal personal information.
The UK’s National Cyber Security Center (NCSC) has issued a security guide on how to identify and remove Flubot. The agency asks users who receive fraudulent messages not to click on the link in it and install the requested application.
The NCSC also asked to forward the message to 7226, a free spam reporting service owned by cellphone operators, where users were required to delete messages. For those who have already clicked on the link and downloaded the application, are asked not to enter an online account.
This is done in order to stop hackers from gathering more information. After that do reset the device as soon as possible. Apart from NCSC, network providers such as Three and Vodafone also alerted users to the attack.
