The National Cyber Security Centre (NCSC), a British organisation dedicated to computer security, warns its users about Android smartphones: Spyware called Flubot It is currently being spread via SMS.
According to the organization’s report, many Android users in the UK received a text message claiming:The package could not be delivered to their homeThe message claims to be from a delivery service like DHL. Scams involving a package not being delivered are common. A few weeks ago, a similar phishing attack targeted the French.
Spyware aims to steal Android users’ banking details
Users are invited to install an app to track the delivery of the package (completely fictitious) and schedule a new pickup date. The SMS is then forwarded to a fake website that uses the interface of the delivery service. The site encourages the Internet user to install an APK file. To be clear, this APK file has nothing to do with an Android app used to track your packages.
“The tracking app is actually spyware that steals passwords and other sensitive data” Explains the National Cyber Security Center, APK file designed to install Flubot on victims’ smartphonesThe malware then deletes large amounts of data, including passwords or online banking information. An experienced attacker equipped with anti-fraud software can use this information to steal money from your bank account.
If you have already installed the APK, NCSC recommends you to factory reset your smartphone in case of emergency. Afterwards, change the passwords of all your online accountsincluding those of your online bank. “If you’ve used the same passwords for other accounts, they will need to be changed as well.” underlines the report.
According to Lab42 research, 59% of Internet users use the same password for all their online accounts. It is clear that this common practice makes the work of hackers easier. To choose a good password, we recommend that you avoid the most classic patterns with a capital letter at the beginning and a symbol at the end, and prefer a sequence of characters that mixes punctuation marks, symbols, numbers and letters. Finally, we will recommend a password generator so that you do not forget your new secure code.
Source: National Cyber Security Center
