FluBot malware asks Android users to track package delivery using link, then steals bank details

FluBot is installed via text messages claiming to be from a delivery company that asks users to click a link to track package delivery. The phishing link then asks users to install an application to follow the fake delivery.

Are you in the habit of clicking on links that you get through SMSes? If yes, you may want to be careful and give a second thought before you click on a random link to track delivery or to download something, because that link could cost you. Reports of a new malware called FluBot spreading fast in the UK in disguise of package delivery tracker have surfaced. The malware is installed via text messages and claims to be from a delivery company that directs users to click on a link to track the package delivery. The phishing link then asks users to install an application to track the delivery. The app in reality is malware that steals information from affected Android phones. The malware is spreading fast and widely affecting users in the UK, Spain, Germany, and Poland. The UK's National Cyber Security Centre (NCSC) has issued security guidance to identify the malware and network providers like Vodafone UK have issued warnings to users over the text message attacks. The NCSC says that affected users must reset their devices as soon as possible as the malware cannot survive a full data wipe. It also directs users to not log into any new accounts to prevent their data from getting compromised. Further, they should change passwords as the virus may have compromised the passwords too.