Scammers have switched tactics by trying to lure Riverina residents to click on a link with a fake parcel tracking number.
Originally, Scamwatch received thousands of reports of a voice mail scam currently circulating via text messages, containing "dangerous" malware that can read text messages and access other personal data.
The number of reports has been on the rise each day, an Australian Competition and Consumer Commission spokesperson said, with one reported financial loss of $30.
But now the messages have changed to claim that the recipient has a package set for delivery that can be tracked.
How it works
Flubot is an Android phone banking malware, and installing the malware results in the phone being compromised and sending the malicious text messages to other devices.
Android phones and iPhones can both receive texts from the malware however only Android phones can be infected with Flubot.
iPhone users clicking a Flubot link may be presented with download malicious software to download that is not Flubot but may still damage their device.
What do they look like?
The FluBot messages and website domains vary and all some sections are seemingly gibberish characters used to identify recipients/senders by the scammers.
They can include "Hi. We have (1) package pending on your name" or "Your package with DHL (ePacket) is now in transit".
What to do if you receive the message?
Delete the text message and do not click on the link or download any files.
Do not call back the individual who sent the text as they are unlikely to be a scammer or criminal.
If you have already clicked the link to download the application, your passwords and online accounts are now at risk from hackers.
Do not enter your password, or log into any accounts until you have followed these steps:
- To clean your device, contact an IT professional, download official Android anti-virus software through the Google Play Store, or perform a factory reset of the device.
- Performing a factory reset of your device will delete all of its data including photos and authentication applications.
- If you have logged in to any accounts or apps using a password since downloading the app, that account password needs to be changed.
- If you have used these same passwords for any other accounts, then these also need to be changed.
- Contact your bank and ensure your accounts are secure.
Make a report to ReportCyber if you have been a victim of this cybercrime and can also report to Scamwatch.
If you have lost personal information to a scammer and are concerned you can contact IDCARE at www.idcare.org or 1800 595 160.
Our journalists work hard to provide local, up-to-date news to the community. This is how you can access our trusted content: