This malware attack uses your emotions, including fear, to get you to install malware on your phone
This bogus text message tries to scare you into installing malware on your Android phone
And right below that copy, written to scare the hell out of Android users, is a link that says “Install Security Update.” The text even directs Android users to remove some protection they might have had against installing malicious apps. On the bottom of the message it notes, “If a window appears preventing the installation, select “settings” and enable the installation of unknown apps.”
If you click the link but do not install the app, your phone won’t be infected. Still, Cert NZ suggests that if you do click on the link that you should change all of your passwords and contact your bank just to be safe. If you do click on the link and install the app, you need to wipe your phone by performing a factory reset. You should also change all of your passwords and call your bank.
FluBot has been able to trick Android users into giving it permissions while it runs in the background, creating all sorts of havoc for the device owners. FluBot has been spotted in Spain, Germany, Poland, Hungary, UK and Switzerland as well as Australia and Japan. It can steal banking and payment information by placing overlays on top of legitimate banking, payment, and cryptocurrency apps.
Another trick tries to get you to install a parcel tracker on your handset
The key to this particular scam is to get you so nervous about FluBot that you re looking for any thing that you can use to block it. So the scam text gives you a lifesaver in the form a fake software update that is designed to attack your phone with the virus that you think that you are protecting it from.
Another trick used is to get you excited about a fake package that is supposedly coming your way. This message also gives you directions on how to disable the block against installing unknown apps. Again, the bad actors are toying with your emotions since they know most people love receiving unexpected parcels.
The way to prevent your Android phone from being infected is to use common sense. Don’t be quick to tap on a link and if something doesn’t seem kosher about a text you receive, delete it immediately. And even if you don’t live in an area where FluBot has been seen, at least not yet, you should still be knowledgeable about this scam.