Please be aware of texts suggesting that you need to take action about a parcel delivery.  

There is a new Android and IOS phone scam circulating at the moment that may be affecting you and your family. This alert is simply to make you aware of it and to ask that you share this with your family and friends, and also to encourage them to share it with any of their contacts, especially those vulnerable to such events.

What does it do?

A malicious app (known as a ‘Flubot') is sending text messages from infected devices, to contacts it has received from other infected devices. Once the message is sent, the phone blocks the number so that the recipient is unable to respond and raise suspicion.

The parcel delivery messages will come from a New Zealand or other mobile number and contain a link to a parcel delivery website asking to install an app. Installing the app triggers the infection and the device will begin sending missed parcel messages to other devices, as well as trying to get the device owner’s credit card and banking details.

What may it look like?

What do I need to do?

• DO NOT click on the link if you receive a text message about a parcel or delivery, and DO NOT install any app the page asks you to.
  If you are expecting a delivery, track it via the courier’s website directly. 
• If you have been affected by this threat you should factory reset your device as soon as possible. This will delete any data on your phone, including personal data.
• You should not restore from backups created after installing the app.
• You will also need to change the passwords to all of your online accounts, especially any financial accounts. If you have concerns that your accounts may have been accessed by unauthorised people, contact your bank immediately.