The Fluebot malware is spreading again in Finland

Malicious software steals data from your phone.

The Flubot malware is again being actively disseminated in Finland. Adobe Stock / AOP

The Finnish Transport and Communications Agency Traficom warns about the Flubot malware campaign, which has been activated in Finland. Malicious software is targeted at Android devices.

The malware is spread via text messages. Messages can be very vague and there may be extra spaces between the letters. The message is trying to open a link.

Opening the link itself does not directly install the malware. The link will take you to a scam site that is trying to get malware to download to your device.

– The malware requests the user’s explicit consent for installation. An attempt is made to persuade the user to disable the device’s security settings in order to install the malware, the Traficom bulletin states.

No attempt is made to get Iphone users to install malware, but to get their subscription, for example.

For example, scam messages look like this. Cyber ​​Security Center

Iltalehti has received messages that have been made to appear, for example, from the tax authorities. According to Traficom, messages can also arrive with themes such as a voice message, a missed call or an incoming broadcast.

– The latest Flubot malware campaign is broadly in line with previous campaigns in terms of how it works. Thousands of malicious messages are circulating. The malware has been updated and scams in this campaign are also spread via multimedia messages, Cyber ​​Security Center Security Expert Matias Messi says in a press release.

Flubot malware steals data from a user’s phone and spreads malware through infected devices with messages.

The Cyber ​​Security Center has issued a malware warning.

Did you download the malware?

The Cyber ​​Security Center has distributed instructions to those who have installed malware on their phones:

  • Reset the device to factory settings. When restoring from a backup, make sure that the device is restored to the backup created before the malware was installed.
  • If you used a banking application or processed credit card information on an infected device, please contact your bank.
  • Report a monetary loss.
  • Change passwords for services you have used on your infected device. The malware may have stolen your password if you signed in to the services after the malware was installed.
  • Please contact your carrier, as you may have left your subscription for paid messages. Android malware currently on the move spreads itself through SMS and MMS messages from infected devices.

ttn-54