If you have already clicked the link to download the application, your passwords and online accounts are now at risk from hackers.ĭon't enter any passwords or log into any accounts until you have followed the below steps. The landing page that fraudulently states your device is infected with Flubot can look like this:Īct immediately.
You would then be asked to install the application.
If you have an Android device, it will download an application called Voicemail71.apk, Update42.apk’ or DH元4.apk.
This is a clever trick by scammers your phone is not infected, but installing the security update will infect your phone as it downloads the Flubot malware. However, if you do accidentally click on this link, we note that this will take you to a page which claims your device is already infected with Flubot and tells you that you need to install a security update to remove Flubot. We strongly recommend that you never click on the links in these messages. A whole album is uploaded - | here: "> y6jĮxample: An SMS that says someone has uploaded your photos The typical wording of these messages is: They provide a link to where the ‘album’ has been uploaded. Starting in October 2021, some Flubot messages now say that your photos have been uploaded.
Recently, we’ve received reports of messages relating to Zoom invites, Google verifications and ‘thank you’ messages from clinics, as well as the major categories set out below.įlubot text messages include a link which almost always contains a series of 5-9 random letters and numbers at the end of the linkĪs a general rule, if you receive a text message that contains a link, do not click on the link. Flubot text messages change regularlyįlubot scammers are regularly updating the text messages they send out to try and infect your device with Flubot. We’ll update this page regularly, but we recommend that you check the Twitter account for the most up to date warnings about these messages. Scammers are frequently updating the Flubot text message format.