The FluBot malware that hits Android targets smartphones via fraudulent text messages before using the infected devices to attack others.
USE THE HACKED SMARTPHONE TO ATTACK OTHERS
The people concerned receive a fraudulent SMS claiming to come from a delivery service such as DHL or Amazon. The message in question invites victims to click on a link to install an application to track the delivery of their packages. It is obviously a trap and the app thus installed turns out to be a vacuum cleaner of personal data accessing in particular banking information.
Once installed, FluBot obtains the necessary permissions to, among other things, access the contact directory. It is thanks to this that he can subsequently target other people using the same method.
SITES THAT ENCOURAGE THE INSTALLATION OF MALWARE
The malware is also pernicious in the way it tricks victims into installing the application. The link contained in the fraudulent SMS indeed refers to a download web page. However, on Android, installing APK files from a web browser is not allowed by default. However, the bogus sites that victims are referred to are full of instructions on how to get around these restrictions.