（ACCC提醒澳大利亚在线购物者警惕Flubot包裹跟踪骗局）这种恶意软件只会感染安卓手机。如果你点击这个链接，它会把你带到一个名为Voicemail71.APK的应用程序。一旦你下载了这个应用程序，你的安卓手机就会被感染。现在，它不仅能你看到你输入的所有密码，还能获取你手机里的所有联系人。这意味着你收到的所有短信都不是来自骗子，而是来自一个不知情的受害者。Rickard女士警告称:“如果你下载了它，恶意软件就会允许阅读短信，允许发送短信，它甚至可以在不通过拨号程序的情况下发起通话。”“它会读取用户的联系方式。可以在你不知情的情况下整晚发送信息和拨打电话。”她说，ACCC因此 已经收到了“大量的投诉”，其中有人在电话中受到了谩骂，因为从他们的号码发送了诈骗）短信，人们打电话给他们，误以为他们是骗子。事实上，他们是骗局的受害者。我现在收到的恶意垃圾短信太多了，当我的手机响的时候，我甚至都不看它一眼。—Shaun Ewing (@swewing) 2021年8月20日在Twitter上说道。小心另一个邮政诈骗，Scamwatch提醒另一个邮政诈骗正广泛传播。需要注意的是这一个与Flubot骗局没有任何关系。这种以短信方式进行网络钓鱼活动一般会发送这样的指令：“请确认您今天发货的详细信息，否则您的包裹将被退回给零售商：1m8me.redacted.”网站的域名则各不相同。第二种形式是索取信用卡的详细信息和状态，“需要支付3.95澳元才能完成验证，金额将被退还。”一名ACCC发言人指出：“提供信用卡详细信息的结果就是会被收取远远超过此数额的钱。”如果我点击了Flubot链接，我应该做什么？你应该立即联系你的发卡行，确保你没有任何财产损失。Rickard 女士表示，有三种方法可以清除该恶意软件。她警告说：“仅仅卸载这款应用程序并不能解决这个问题。”你需要找专业的IT人员来清除病毒，下载杀毒软件来清除病毒，或者你可以将你手机做一次出厂重置。“只要你的手机被感染了，就不要进入你的任何账户。” 她补充说。如果您的个人信息给骗子盗取，您可以联系IDCARE（https://www.idcare.org/） 或者拨打1800 595 160。如果您是该网络犯罪的受害者，您也可以向ReportCyber（https://www.cyber.gov.au/acsc/report）报告。[英文原文]ACCC warns Australian online shoppers of Flubot parcel tracking scamAuthorities have labelled a text message “dangerous” which is the last thing Australians need as they turn to online shopping during lockdown.Alex Turner-Cohen3 min readAugust 31, 2021 – 4:13PMThanks to COVID, lockdowns and working from home, increased virtual presence has created fertile ground for online fraudsters and identity thieves.anonymous-non-premium-pixelThe masterminds behind the ‘Flubot’ scam text messages being sent to thousands of Aussies have changed their strategy in a bid to catch out more people.For the last few weeks, phone users have been receiving scam messages asking to click on a link to listen to a missed voicemail.However, over the weekend, the scammers pivoted to something new which is bound to trick more Australians.From Sunday, users are being enticed into clicking the link by checking out when a parcel is due to arrive.“Your package is due to arrive, track here,” it reads, along with a website address that will infect your phone with malware.The ploy is particularly concerning considering that Australia’s two largest states, NSW and Victoria, are currently in lockdown, meaning online shopping is on the rise.Scamwatch, a division of the Australian Competition and Consumer Commission (ACCC), confirmed to news.com.au that the parcel messages were related to the Flubot malware scam.Since the scam was first reported on August 4, Scamwatch has received 8400 reports of the Flubot text messages, with over $9000 in reported losses, as of Tuesday.ACCC warns Australian online shoppers of Flubot parcel tracking scamACCC warns Australian online shoppers of Flubot parcel tracking scamAn ACCC spokesperson said: “We can confirm Flubot messages have moved from variants around missed calls and voicemails to ‘schedule your package delivery’ texts, changing on the August 29, 2021.”The messages reported include: “Hi. We have (1) package pending on your name. Schedule delivery now”, “Your package with DHL (ePacket) is now in transit” and also, as seen in the photos obtained by news.com.au: “Your package is about to be delivered, track here.”Delia Rickard, deputy chair of the ACCC, told news.com.au the scam has been widely reported in Europe and now it’s come to Australian shores.In Europe, the scam originally started out as voicemail messages then evolved to be a more sophisticated fake parcel text.Australia is following the same pattern, according to Ms Rickard.“It’s a very sophisticated scam and potentially very dangerous. It can compromise people’s bank accounts,” she previously told news.com.au.“Whatever you do, don’t click on the link.”Instead, block the number, delete the message and report it to Scamwatch.ACCC warns Australian online shoppers of Flubot parcel tracking scamACCC warns Australian online shoppers of Flubot parcel tracking scamThe malware only infects Android phones.If you click on the link, it will take you to an app called Voicemail71. APK. Once you download the app, your android phone is infected.Not only can it now watch you type in all your passwords, it also gets hold of all the contacts in your phone.That means all the texts you’re getting aren’t from a scammer – it’s from an unknowing victim.“If you download it, the malware gives the permission to read SMS messages, it allows it to send SMS messages, it could initiate the phone call without going through the dialler,” Ms Rickard warned.“It reads the user’s contact details. Could send out messages and calls all night without you knowing.”She said the ACCC had received a “number of complaints” to this effect, where Australians had been abused over the phone as people called them up mistaking them for scammers because they had sent the text.In reality, they were the scam victims.I’m getting so many of these malware spam SMSs now that I don’t even look at my phone when it dings. pic.twitter.com/zcdquI3iw4— Shaun Ewing (@swewing) August 20, 2021Another postal scam to watch out forScamwatch also said another postal scam is circulating.It’s important to note this one is in no way related to the Flubot scam.The text message phishing campaign sends instructions such as “Please confirm your details for shipment today otherwise your parcel will be returned to the retailer: 1m8me.redacted”.The domain to the website varies.This second campaign is after credit card details and states “3.95 AUD has to be made for successful verification. Amount will be refunded”.An ACCC spokesperson noted: “Providing credit card details results in charges significantly exceeding this amount.”What should I do if I clicked on the Flubot link?You should immediately contact your bank to make sure you haven’t lost any money.Ms Rickard said there were three ways to get rid of the malware.“Just getting rid of that app doesn’t get rid of that problem,” she warned.You need to go to an IT professional to wipe the virus, download an antivirus software that gets rid of it, or you can do a factory reset.“As long as your phone is infected, don’t go into any of your accounts,” she added.If you have lost personal information to a scammer you can contact IDCARE or call 1800 595 160. You can also make a report to ReportCyber if you have been a victim of this cybercrime.
