Friday, May 23, 2025
HomeAndroidBeware of FluBot Android Malware That Targets Android Users Via SMS

Beware of FluBot Android Malware That Targets Android Users Via SMS

Published on

SIEM as a Service

Follow Us on Google News

The cybersecurity researchers of Finland Aino-Maria Vayrynen of the National Cybersecurity Center have recently published a “severe alert” to notify the country’s Android users regarding a huge malicious campaign.

In this malicious campaign, the Android users were being attacked with FluBot banking malware launched via text messages sent from negotiated devices.

However, this is not the first time when FluBot has initiated any campaign, as it is being stated that this campaign is the second-largest FluBot campaign that attacked Finland.

- Advertisement - Google News

This type of malware attack is remarkably unusual and very dangerous, in this campaign, a group of text messages is being sent by the attackers.

Banking Malware Goes Global

After investigating the malware attack, the experts came to know that this malware has been active since 2020. Its main motive is to steal all the following details from the victim’s devices:- 

  • Banking credentials
  • Payment information
  • Text messages
  • Contacts

At first, the threat actors have targeted the Android users of Spain along with several other European countries, and now they have targeted the Android users of Finland.

Organizations Encouraged to Inform Their Personnel

The experts of NCSC-FI issued a yellow alert, which implies some general actions are to be taken by the users as soon as possible. They have notified the users by saying that if they receive a scam message, do not click on the link, and do not download the file shared through the link.

However, the situation needs to get handled as soon as possible; that’s why it is also important for organizations to understand what data the phones might have contained so that they can assess the risks because FluBot generally steals data from phones.

Recommendations

After investigating the whole malware attack, the experts suggested some general measures that are to be followed by the users; thus, we have mentioned below:

  • Always remember to perform a factory reset on your device.
  • Remember to contact your bank if you use a banking application or handle credit card information on your device.
  • If you encounter any financial losses that report them to the police.
  • Always reset your passwords on any services that you have used with the device.
  • Lastly, contact your operator, as the threat actors might use your subscription to send text messages subject to a charge.

The information security adviser at the NCSC-FI, Aino-Maria Väyrynen stated:-

“We managed to almost completely eliminate FluBot from Finland at the end of summer thanks to cooperation among the authorities and telecommunications operators. The currently active malware campaign is a new one because the previously implemented control measures are not effective.”

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity updates.

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

Zero-Trust Policy Bypass Enables Exploitation of Vulnerabilities and Manipulation of NHI Secrets

A new project has exposed a critical attack vector that exploits protocol vulnerabilities to...

Threat Actor Sells Burger King Backup System RCE Vulnerability for $4,000

A threat actor known as #LongNight has reportedly put up for sale remote code...

Chinese Nexus Hackers Exploit Ivanti Endpoint Manager Mobile Vulnerability

Ivanti disclosed two critical vulnerabilities, identified as CVE-2025-4427 and CVE-2025-4428, affecting Ivanti Endpoint Manager...

Hackers Target macOS Users with Fake Ledger Apps to Deploy Malware

Hackers are increasingly targeting macOS users with malicious clones of Ledger Live, the popular...

Resilience at Scale

Why Application Security is Non-Negotiable

The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application security remains a critical weak link for most organizations.

Application Security is no longer just a defensive play—it’s the cornerstone of cyber resilience and sustainable growth. In this webinar, Karthik Krishnamoorthy (CTO of Indusface) and Phani Deepak Akella (VP of Marketing – Indusface), will share how AI-powered application security can help organizations build resilience by

Discussion points


Protecting at internet scale using AI and behavioral-based DDoS & bot mitigation.
Autonomously discovering external assets and remediating vulnerabilities within 72 hours, enabling secure, confident scaling.
Ensuring 100% application availability through platforms architected for failure resilience.
Eliminating silos with real-time correlation between attack surface and active threats for rapid, accurate mitigation

More like this

Hackers Target macOS Users with Fake Ledger Apps to Deploy Malware

Hackers are increasingly targeting macOS users with malicious clones of Ledger Live, the popular...

GenAI Assistant DIANNA Uncovers New Obfuscated Malware

Deep Instinct’s GenAI-powered assistant, DIANNA, has identified a sophisticated new malware strain dubbed BypassERWDirectSyscallShellcodeLoader. This...

New Formjacking Malware Targets E-Commerce Sites to Steal Credit Card Data

A disturbing new formjacking malware has emerged, specifically targeting WooCommerce-based e-commerce sites to steal...