Threat actors are using text messages to spread password-stealing malware that attacks Android devices, experts have warned. Once installed, the malware, known as FluBot, will collect authentication details and other personal and sensitive information. To make matters worse, the malware enters the victim's address book and, like a worm, infects other devices by sending itself to all contacts.
LaComparacion needs you! We're taking a look at how our readers are using VPNs for an upcoming in-depth report. We'd love to hear from you in the survey below. It won't take more than 60 seconds of your time.
Click here to start the survey in a new window
Third-party APK
From an infected device, the malware sends a text message that masquerades as legitimate, often claiming to be from reputable companies such as DHL, Amazon, Asda, Argos and others. The message includes a phishing link that asks recipients to download an app, distributed as an APK, to track its delivery. As you can imagine, the app is the password-stealing malware. By default, Android blocks the installation of third-party APKs. That is why the website hosting the APK also helps users to bypass this security mechanism. Once installed, the app goes to work. The UK's National Cyber Security Center (NCSC) has released security tips to help users identify FluBot text messages, while network providers Three and Vodafone have also started issuing malware warnings to their users. The NCSC further encourages users who receive FluBot messages to forward them to the free spam reporting service (7726), before deleting the message. According to reports, while the malware is currently only known to infect Android devices, the NCSC also advises Apple users to pay close attention to text messages asking them to click links related to a delivery. While APKs won't install on iOS devices, the fear is that fake delivery websites could also be used to siphon personal information. We also rounded up the best ransomware protection tools. via ZDNet