Consumer Protection has warned Android device users to be aware of the FluBot malware, which sends suspicious and garbled text messages as a scam designed to obtain banking details and other personal information.
Commissioner for Consumer Protection, Gary Newcombe said the Agency understood the scammers behind the malware were deliberately using bad grammar and spelling errors in the text messages to circumvent strict filters put in place by telco companies that would ordinarily block this type of message.
“The FluBot malware has already infected devices in Europe, after Android users clicked on the links in the messages and installed the FluBot app, which is only available outside of the official Google PlayStore,” Mr Newcombe said.
“Even though iPhones can receive the messages, the FluBot malware doesn’t pose a threat to iOS users because they can only download and install files directly from the Apple store.”
The Commissioner said that once installed on an Android device, the FluBot could spy on and steal data.
“Of particular concern is its ability to overlay on top of a legitimate banking app, leading the victim to a scammer’s site instead of their own bank,” he said.
“FluBot can also access your contact list, meaning your friends and family may also start receiving the bogus messages.
“New figures from WA ScamNet reveal that so far in 2021, 81 victims have lost more than $904,000 to phishing scams, compared to 65 victims with almost $305,000 in losses for the whole of 2020.”
Mr Newcombe said the best advice was never to click on links in messages you were not expecting; do not download apps outside of official app stores; and consider installing anti-virus software on your Android phone.