Last Updated on 05/12/2021 by Sunaina
The Flubot campaign has returned to Finland for the second time this year. The preceding round of assaults occurred between early June and mid-August. This time, Finland’s National Cyber Security Center (NCSC-FI) has issued a serious warning about a fresh wave of cyberattacks.
Flubot is being pushed to Android users in the nation via SMS delivered from infected smartphones in this large operation. Furthermore, the spam campaign employs a voicemail theme, asking recipients to click on a link that will allow them to retrieve a voicemail message or a message from the mobile operator. Over 70,000 similar communications were discovered by NCSC-FI in a 24-hour period, and dozens of infections were confirmed. Flubot is also appearing on a variety of websites, with Netcraft detecting roughly 10,000 domains that are disseminating the virus.
Once installed, the banking virus may access the contacts list, read text messages, spam SMS others, and steal passwords and credit cards. Furthermore, if this effort is as vigorous as the summer campaign, analysts expect that the number of messages will climb to hundreds of thousands in the coming days.
ThreatFabric discovered 12 malicious applications in the Google Play Store that have been downloaded more than 300,000 times and are stealing people’s bank account information. APT37’s new Chinotto virus, which is distributed via spear-phishing emails, can infect both Windows and Android devices. The virus is capable of capturing screenshots, collecting data, and deploying further payloads. Android malware was connected to APT C-23, which was used to target individuals in the Middle East, last month. The malware conceals itself beneath well-known programme icons for Chrome, YouTube, Google, and Google Play.
Android smartphones have long been a favourite of hackers. Users are warned not to click on embedded links or download anything supplied via the link to their devices by the NCSC-FI. Flubot used to target people in Spain when it first launched, but it has now expanded globally and grown rather successful. As a result, Android users beware!
