Flubot Scam

[IaMa]

Despite EE not having any warnings on their homepage like other providers it seems we are now getting attacked by the Flubot scam. If you are on Android then delete texts that come from DHL who suggest they have a delivery for you and tempt you to download tracking app which is infact malware. I don’t think IOS users are effected.

[BrendonH]

EE tweeter about it.

It's all over the internet.

[Jon_K]

Hi @Lama.

Welcome to the community.

This malware is being spread by SMS/text messages, which fraudulently claim to be from a delivery company and provide a link to track your order. 

With the FluBot malware, if you have an Android phone and click on this URL, it will then take you through a series of further steps to download an app and grant third party permissions on your device. 

We are not able to check to confirm whether your device is infected, but if you have gone through that whole process it is likely that your phone is infected with this malware. 

If you think you have downloaded this malware, we recommend you follow the recommendations from the UK National Cyber Security Centre: https://www.ncsc.gov.uk/guidance/flubot-guidance-for-text-message-scam.

Jon

[Chris_B]

@IaMa   There are loads of scam messages the rounds it’s nothing new.  And any text requesting you to download an app should be the give away its a scam and should be forwarded to 7726 and then the number and then delete the text message in question.   

[Northerner]

You need to allow the application to install which by default is deactivated on Android. 

There is also the same message text from Hermes

Thanks

[XRaySpeX]

Not noticed anything on the Net w/out proactively searching for it but have been informed by BBC TV Text. It's a typical scamming text attempt about a delivery you are not expecting. There are plenty of opportunities to back out of it as it asks for various confirmations.

[EssexBoyEE]

One of my Son's had a Text that looked as though it was from Royal Mail, they claim they needed 1.99p of you to redeliver your Parcel.

I was suspicious of the link, so I copied and opened it on a Safe Laptop, it redirected me to a Royal Mail Website, which although fake, did look very convincing, asking for this and that, can't say for sure whether it attempted to install anything on a Mobile as I was on a Safe PC  but there was no mention of downloading APKs or Apps, 

[Chris_B]

@EssexBoyEE   The Royal Mail one wanted you to make a payment to “supposedly receive“ the item.