The letter iAbout Comreg IconAbout PRS IconAbout PRSAuthorise Postal ProvidersAuthorise Postal Providers IconBase Station Location IconRadio Tower broadcasting wavesBilling Option IconShow more billing options for this planView this sectionA rightward arrowCode of Practice IconCode of PracticeA weighing scalesCompare Services IconCompetition Law Enforcement IconCompetition Law EnforcementPerson holding their hand up with a question markComplaints and Queries IconCompliance Enforcement IconCompliance EnforcementComreg Investigations IconComreg InvestigationsGroup of peopleConsumer Services IconComReg ConsumerTwo people speaking with a speech bubblesGovernment building with flagCorporate Governance IconCoverage Map of IrelandCoverage MapPerson wearing a headsetCustomer Service IconArrow pointing downDownloadE-licencingE-licencing IconErrorA red sign with a white exclamation markFacebookThe Facebook LogoTwo Speech bubblesFeedback IconSquiggly line Iconfive_eight_gz IconOpen PadlockFreedom Act IconFrequency Allocations IconFrequency AllocationsStampGeneral Authorisation IconLandline PhoneHome Phone IconIndustry Forms IconIndustry FormsComReg IndustryA tall buildingInternational IconInternationalLaptop computerInternet IconJargon Buster IconJargon BusterGavel hammer used in courtLegislation IconLicense Exceptions IconLicense ExceptionsLicensing IconRolled Certificate with RibbonLiecense Ammendments Permissions IconLiecense Ammendments PermissionsLinkedinThe LinkedIn Logo - this link will open in a new windowMarket Analysis IconMarket AnalysisMarket Information IconMarket InformationMegaphoneMobile PhoneMobile Phone Iconnav-home-iconnav-home-icon-bluenav-home-icon-greenA folded newspaperIndustry News IconA folded newspaperNews and Press IconNounSubmit a consumer query or complaintPhone BookNumbering Naming Addressing IconShow other information about planOther Information IconShow payment options for this planPayment Options IconPDF logoPDF fileLocation DevicePersonal Locator Beacon IconEnvelopePostal IconPostBoxPostal Authorisation IconEuro symbolPremium Rate IconTest Trail One IconTest Trail OnePrice Control Accounting IconPrice COntrol AccountingProductsProducts IconPRS Number IconPRS NumberBlank PagePublications IconRadio SpectrumRadio Spectrum IconRadio Tower broadcasting wavesIndustry Radio Spectrum IconRegulation Of An Post IconList with a tick markSignal wavesRSS FeedSpectrum Awards IconSpectrum AwardsSpectrum Compliance IconSpectrum ComplianceJigsaw pieceStrategy IconTips Advice IconTips AdviceShapeTwitterThe Twitter Logo - this link will open in a new window

SIGN UP TO NEWS ALERTS

Please enter your email address below. If there are particular publication types or categories that you want to receive alerts for, please select them from the lists. If you do not select anything you will receive alerts for all publications.

Hold CTRL to select more than one
Back
Consumer News

Advisory – SMS Scam Campaign targeting Android Users

ComReg would like to make mobile phone users aware of a warning from the National Cyber-Security Centre (NCSC) in relation to a scam message sent through a mobile phone message.

The NCSC has received reports of a spyware software labelled FluBot Messaging Malware affecting Android users in Ireland.

Below are the potential impacts to users should their devices become infected with Flubot:

  • Once infected Flubot can Make Phone Calls;
  • Steal passwords and other sensitive data;
  • Access contact details and send out additional text messages, thereby further spreading the malware;
  • Change Accessibility Settings on devices.

 

Please note that this threat is not specific to any Mobile Operator and users across all mobile networks are at risk of receiving these messages.

The messages typically contain a link for the victim to click on to get details of a missed package delivery. This link will direct the victim to a fake website replicating the legitimate delivery company site. The victim will then be asked to download two .apk files which are banking trojans. Users will then be prompted to manually override and allow an untrusted app download.

Here is an example of the message sent:

Visual of SMS reading "Your Asda order is out for delivery visit [link] to track your order.

Apple devices are not currently affected by this malware.

If you receive a message as described above the NCSC advises:

  • DO NOT click on the link, and delete the message.
  • If you are expecting a delivery, check it through the companies official website.
  • If you have clicked on the link and installed the app – perform a factory reset on the device. (Note: If you do not have backups you will lose data).
  • When restoring backups do not restore from any backups created after you installed the malicious app as these will be infected.
  • Reset passwords on any accounts used after you installed the app. If you use the same passwords on other accounts, change these also.
  • Ensure that the Google Play Protect service is switched on.

find the full advisory from the NCSC here.

Share: