Britons targeted by a Flubot malware scam

Malicious hackers are impersonating delivery services and sending phishing text messages to Britons to trick them into downloading Flubot malware. It is capable of intercepting messages and capturing banking details.

One of the UK’s leading mobile networks, Three, warned about a phishing scam that allegedly has affected all network operators.

“Many people in the UK have been targeted with a text message that looks like it’s from a delivery service, or it may say that you’ve received a voicemail,” the company warned in a blog post.

The message asks you to download an app so that you can track a parcel or listen to the voicemail. Some messages claim to be from DHL, Amazon, Asda, and Argos.

“If you click and download the app on an Android phone, it’ll try to install the app. If the app is installed, the malware contained in the app could intercept text messages or capture online banking details,” Three explained.

This fraud attack, according to the company, has affected all network operators. Even though most messages have been blocked, a small number of Three’s customers may have received them. Therefore, the company advises to stay alert and be careful about clicking on any links received via text message.

If you have received a message but have not clicked on any links, deleting it is enough. If you have clicked on it but did not download the app, your phone will not be infected with malware. If you have downloaded the app on an Android device, your contacts, text messages, and online banking details may have been accessed by fraudsters.

In case you use an online banking app, contact your bank urgently. Also, change all the passwords stored in your device and change any other app or online services passwords you may have entered while installing the fraud app. 

“If your device has been infected with the Flubot malware, you may have been charged for text messages over your plan. If so, we’ll arrange a refund for you as soon as possible,” the company stated.

More from CyberNews:

Social engineering goes automatic: new robocall bot on Telegram can trick you into giving up your password

Unsettling statistics: How your financial data is spread across the internet

Iran threat actor Charming Kitten has exfiltrated 2TB of victims’ data since 2018

The US Postal Service sued for alleged massive spying program

Influenced by the pandemic, data breach costs hit a record high, IBM report shows 

Ransomware surged 93% in last 6 months fueled by triple extortion

DuckDuckGo’s new email privacy service: how will marketers react? 

Oppressors used Pegasus for nefarious means. It can’t be that shocking

Subscribe to our newsletter