The ‘FluBot’ spyware, sent via ‘package delivery’ text messages, affects Android phones and devices.
The NCSC is aware that a malicious piece of spyware – known as FluBot – is affecting Android phones and devices across the UK.
The spyware is installed when a victim receives a text message, asking them to install a tracking app due to a ‘missed package delivery’. The tracking app is in fact spyware that steals passwords and other sensitive data. It will also access contact details and send out additional text messages – further spreading the spyware.
The text message requests that victims click a link. Doing so directs them to a scam website, such as the one shown below (although the branding may vary).