Go to whole of WA Government search

Don’t get infected by FluBot

If you’ve been bombarded with suspicious, garbled text messages lately that mention a missed call or voicemail, you’re not alone.

 FluBot phishing SMS - screenshotFluBot phishing SMS - screenshot2FluBot phishing SMS - screenshot3

There’s a good chance the messages riddled with typos have been generated by malware called FluBot. The malware tries to steal Android device users’ banking details and other personal information.

We understand the scammers behind the malware are deliberately using bad grammar and spelling errors in the text messages to circumvent strict filters put in place by telco companies that would ordinarily block this type of message from getting through.

The FluBot malware has already infected devices in Europe, after Android users clicked on the links in the messages and installed the FluBot app, which is only available outside of the official Google PlayStore.

Even though iPhones can still receive the messages, the FluBot malware doesn’t pose a threat to iOS users because they can only download and install files directly from the Apple store.

Once installed on an Android device, the FluBot can take over to spy and steal data. Of particular concern is its ability to overlay on top of a legitimate banking app, leading the victim to a scammer’s site instead of their own bank. FluBot can also access your contact list, meaning your friends and family may also start receiving the bogus messages.

While phishing scams aren’t new, they are on the rise. As of August 2021, figures from WA ScamNet reveal 81 victims have lost more than $904,000 to phishing scams. This is compared to 65 victims with almost $305,000 in losses for the whole of 2020. 

  • Never click on links in messages you are not expecting. 
  • Don’t download apps outside of official app stores and
  • Installing anti-virus software on your phone.

If you have installed the FluBot app, it is recommended to do a factory reset on your device to remove the malware. Avoid doing a ‘restore’ on your phone to retrieve lost apps and files, as this may reinstate the malware.

Should you fall victim to FluBot or another malware, contact WA ScamNet on 1300 30 40 54 for further guidance.