People are advised to be wary of unsolicited messages about missed deliveries as new sophisticated text scam circulates.
The National Cyber Security Centre (NCSC) has warned of a spyware software called FluBot that has been circulating recently.
The software is used to steal passwords and other sensitive data and will access a victim’s contacts in order to spread further by sending more texts.
The malicious messages claim a person has missed the delivery of a package or that an order has been sent out for delivery.
The person is given a link through which it claims they can get further details and/or tracking information.
This link directs to a fake website replicating the legitimate delivery company site. Here, the victim will be asked to download two .apk files which are banking trojans.
Once this has been done, the user is then prompted to manually override and allow an untrusted app download.
It was initially believed the scam only targeted Android devices but there have been some reports of the scam from iOS users as well.
Should you receive a message like that described here, the NCSC has advised people not to click on the link and to delete the message.
If you are expecting a delivery at the time you receive the message, check on it through the company’s official website.
If you have received the message and did click on the link, perform a factory reset on the device.
Passwords on any accounts used after the malicious app was downloaded should be changed and if any of those…