{"id":10357,"date":"2021-12-06T11:29:21","date_gmt":"2021-12-06T10:29:21","guid":{"rendered":"http:\/\/dubawa.org\/dir\/?p=10357"},"modified":"2021-12-06T11:29:23","modified_gmt":"2021-12-06T10:29:23","slug":"the-factchecker-31","status":"publish","type":"post","link":"https:\/\/dubawa.org\/dir\/the-factchecker-31\/","title":{"rendered":"The FactChecker"},"content":{"rendered":"\n

FLUBOT: What you need to know about new Malware that targets users\u2019 financial credentials<\/strong><\/h1>\n\n\n\n

By Aisha Ali<\/p>\n\n\n\n

On October 21, 2021, the Nigeria Computer Emergency Response Team (ngCERT), announced and warned online users about the emergence of a new malware that \u201ctargets Androids with fake security updates and app installations.\u201d <\/p>\n\n\n\n

The malware called \u2018Flubot\u2019 is said to \u201cimpersonate Android mobile banking applications to draw fake web views on targeted applications.\u201d  It also steals the personal data and financial information of unsuspecting persons.<\/p>\n\n\n\n

Although multiple reports show it uses different schemes found in older malware families, Flubot has caused a lot of damage within the few months of its emergence. <\/p>\n\n\n\n

What is Flubot?<\/strong><\/p>\n\n\n\n

A malware is a generic word used to describe a virus or a malicious software, designed specially to disrupt damage or gain unauthorised access to a computer system. As such, flubot is a malware-like computer virus that can be installed on an android device via a malicious link that is sent through an SMS. <\/p>\n\n\n\n

This malware can take over a user\u2019s phone and send text messages to other people from the device without the user\u2019s knowledge, potentially infecting them as well.<\/p>\n\n\n\n

Flubot malware was first identified on Australian shores in August 2021. It was characterised by a text sent from an Australian phone number that enticed users to click on a link that would then infect their android device with malware.<\/p>\n\n\n\n

How Flubots works<\/strong><\/p>\n\n\n\n

The malware targets different mobile apps based on the device\u2019s language setting. So far, there have been detections of the malware targeting bank apps mainly in Spain, but evidence suggests it may move on to other markets, such as Poland, Germany, Hungary and the UK. Aside from targeting mobile banking apps, flubot also operates on cryptocurrency-related mobile apps as well, regardless of the device\u2019s language setting.<\/p>\n\n\n\n

Flubot is crafted to deceive intended targets.  First, the victim receives a text message informing them about the delivery of a package. These delivery messages usually contain a link to a website that serves as a host for the malware (disguised as the delivery company\u2019s application). <\/p>\n\n\n\n

In recent times, flubot has used the DHL, UPS and FedEx brands to lure unsuspecting members of the public. When the victim downloads and installs the application, the malware uploads the victim\u2019s contacts to its C&C (Command & Control server) and from there, the scheme is launched. <\/p>\n\n\n\n

Click here to continue reading<\/a><\/p>\n\n\n\n

Fact Checks of the week<\/strong><\/h2>\n\n\n\n