Updated:06/04/2022 11:29h
Save
Europol has dismantled the infrastructure of FluBota Trojan for Android devices that was distributed via SMS and pretended to be a delivery company to deceive its victims, which has had a significant impact in Spain in the last two years.
An operation in which eleven countries have participated, including spainmanaged to dismantle the infrastructure used by the criminals behind FluBot in May, as reported in a Europol press release.
It is one of the ‘malware‘ for mobile phones that has been distributed the fastest to date, according to the European agency, with a strong incidence in Spain and Finland since it was discovered in 2020.
FluBot is a banking trojan for Android that impersonates a delivery company to trick users of mobile devices, with whom he comes into contact through an SMS.
It warns of a problem with a supposed order and provides a link from which to check the status of the shipment.
The ‘malware’ uses this channel to encourage victims to download a malicious app. Its danger lies in the fact that it uses ‘Accessibility’, an Android component that observe and control the device, to gain the ability to display overlay windows that can be presented on top of whatever is on the screen, making it easier to data theft on, for example, fake banking portals, and make it difficult to uninstall them.
cyber security company ESET warned of its activity first at the end of 2020, when it had not yet received a name, and later in March of last year, on the occasion of a campaign in Spain that supplanted the MRW company. By the end of that month he had already infected 60,000 terminals worldwide and collected 11 million phone numbers to continue spreading through SMS, as warned by Avas.
See them
comments