Malware is malicious software that hackers use to gain unauthorised access to your computer or device. Malware is often delivered via a link or file in an email or text. It’s activated when you click the link or open the file.

The Flubot scam is named after the malicious software sent via text messages alerting people about false missed calls, voicemails or deliveries. The aim is to infect your phone with the malware if you tap on the link that comes with the message.

We’ve continued to receive reports of the Flubot text malware scam. The wording, the number from which it’s sent and the link may vary but Scamwatch has confirmed that clicking the link installs malware onto your device.

Scamwatch warning example

Most anti-virus applications for Android will be able to remove the malware from your device. It's good practice to run anti malware apps frequently to ensure your device is safe.

To help remove malware from an Android device, see Uncover harmful apps on an Android device below. There is no method to uncover harmful apps on an Apple device.

Alternatively, you can perform a factory reset on your device.

Important: If you use a backup to get your saved files back, you may also restore the malware. It's recommended to use a backup from a date before receiving the malware message.

More information on malware, prevention and signs that your device has been compromised is available at Cyber.gov.au.

Uncover harmful apps on an Android device

To help uncover and remove harmful apps on your Android device, follow these steps:

1. On your device, open the Google Play Store app
2. Access you Google profile menu (e.g. click on your profile picture or tap the three-line icon)
3. Select Play Protect
4. Tap Scan. Your device will start checking for Android malware
5. If your device uncovers harmful apps, it will provide an option for removal

If you have removed malware and still find texts are suspended, please contact us to resolve.

Scamwatch has provided the following recommendations:

• Delete the text message
• Don't call back the individual who sent the text as they are unlikely to be a scammer or criminal
• If you have been a victim of this cybercrime, make a report to ReportCyber
• You can also report to Scamwatch - https://www.scamwatch.gov.au/report-a-scam
• If you have lost personal information to a scammer and are concerned, contact IDCARE at https://www.idcare.org/ or 1800 595 160
• If you have installed the malware contact your bank, ensure your accounts are secure and contact an IT professional
  
  

McAfee has provided this information for customers that have Optus WiFi Secure:

• Optus WiFi Secure protects customers within the home, when connected to their router
• Optus WiFi Secure will scan and block known links / URLs to malicious sites for devices connected to the users' Home Network
• In these circumstances, it works regardless of whether the link is sent via email, text or through a web browser
• Therefore, this should include known sites which this Flubot malware directs users to
  
  

You may also be eligible for the McAfee® Safe Family App with Optus. For more on this, see What is the McAfee® Safe Family App?