Trojan
FluBot
First seen: 2020-12 • Status: disrupted
Disrupted by Law Enforcement
FluBot spread through fake package delivery texts. If you clicked the link and installed the app, it would steal your banking info. Police shut it down in 2022.
Overview
FluBot was an Android banking trojan that spread via SMS phishing disguised as package delivery notifications. It was taken down by law enforcement in 2022.
Also Known As
Fedex Banker, Cabassous
How It Spreads
- • SMS phishing (smishing)
- • Fake delivery notifications
What It Does
- • Stole banking credentials
- • Intercepted SMS
- • Spread via contacts
Is your business exposed?
Target Platforms
Android
Detection Tips
- • Be suspicious of delivery SMS with links
- • Check app sources
MITRE ATT&CK Techniques
T1417, T1411, T1582
If You're Infected
- 1.
Factory reset device
- 2.
Notify contacts who may have received spam
Is your business exposed?
Check if your company data is circulating on the dark web
Free scan • No credit card required