Message Not Downloaded Touch to Review the Message and Try Again Is It Scam

Since August 2021, many Australians accept been getting scam text messages about missed calls, voicemails or deliveries. We've received over 16,000 reports of these scams. These scams have too already been a problem overseas in 2021.

The text messages ask you to tap on a link to download or admission something. There are a large number of variants of the Flubot text messages, but often they inquire you to download an app to rail or organise a time for a delivery, hear a voicemail bulletin, or view photos that take been uploaded. However, the message is imitation, in that location is no delivery, voicemail, or photos uploaded and the app is actually malicious software chosen Flubot.

Android phones and iPhones can both receive texts from the Flubot.

If you receive i of these letters, exercise not click or tap on the link. Delete the message immediately.

What the scam messages look like

Scammers are frequently updating the Flubot text message format. We'll update this page regularly, but nosotros recommend that you check the @Scamwatch_gov Twitter business relationship for the well-nigh up to date warnings almost these messages.

Flubot text letters modify regularly

Flubot scammers are regularly updating the text letters they send out to try and infect your device with Flubot. Recently, nosotros've received reports of messages relating to Zoom invites, Google verifications and 'thank yous' messages from clinics, as well as the major categories set out beneath.

Flubot text messages include a link which well-nigh ever contains a serial of 5-nine random letters and numbers at the stop of the link

Every bit a general dominion, if you receive a text bulletin that contains a link, practise not click on the link.

Photo uploads

Starting in October 2021, some Flubot letters now say that your photos have been uploaded. They provide a link to where the 'album' has been uploaded.

The typical wording of these messages is:

• Someone uploaded your | pictures. A whole album is uploaded - | here: https://consult.priyalco.com/h/?cftlkv">https://consult.priyalco.com/h/?cftlkv y6j

Example: An SMS that says someone has uploaded your photos

We strongly recommend that you never click on the links in these messages. Even so, if you do accidentally click on this link, we note that this will have y'all to a folio which claims your device is already infected with Flubot and tells you that you demand to install a security update to remove Flubot.

This is a clever fox past scammers; your phone is not infected, but installing the security update will infect your phone as it downloads the Flubot malware.

Delivery notifications

Starting in September 2021, many Flubot messages now talk nearly a delivery. They commonly refer to DHL and e'er inquire y'all to take some form of activeness in relation to the 'delivery'. We take also started to see reports referring to Amazon deliveries.

Messages can include:

• scheduling a delivery fourth dimension
• tracking a commitment
• managing a delivery that is 'in transit' or will be 'delivered before long'
• telling yous it'south your last hazard to adjust option upward/delivery of a packet
• asking yous to enter your details to receive a package
• getting 'more information' about your delivery.

Unlike earlier Flubot letters (which are also still circulating), the new text messages may not contain spelling mistakes, then they can be harder to spot. Withal, they practise incorporate a website link followed by 5-nine random letters and numbers. Hither are some examples:

• The commitment time for your package is 03/09. Check out your options: http://instance.com/g.php?l2r54ya alfal
• Your DHL order ID1842225 will arrive soon. Track progress here
• Your society volition be delivered past DHL tomorrow between eleven:26 and 14:26. Track progress https://example.com/due north.php?la4pmtf6u yewv
• You have (1) Pending Package! Ref: DHL-6461W Last chance to Choice it up > https://www.case.com/t.php?kdnypf0ng0
• You must enter your details 2cc receive your packet with DHL https://www.crabsunion.com/0axazu.php?gdk642k
• Inflow today: your Amazon package. More INFO at http://example.com/northward.php?la8zvtf0u
• Arriving today: your (d08) Amazon {s7} package. More info at https://example.com/n.php?ps7gxif4s

Case: An SMS that says your social club will be delivered presently

Case: This SMS says it'due south your concluding take chances to pick up a pending package.

Instance: This SMS says that a bundle is coming today.

Example: SMS that claims you accept 2 packages and it is your terminal take chances to collect.

Example: This SMS asks you to click to track a parcel.

Voicemail and missed phone call notifications (August 2021)

Missed call and voicemail letters started circulating in Australia in Baronial 2021. They often brainstorm with 5-nine random lowercase letters or numbers, so say you had a missed call or voicemail bulletin.

The text bulletin often includes several misspellings. Here are some examples.

• ab12c3 Nfw voice yessage received
• gh6tr7 Voicemail message receiied
• x78y9z New oozce-message received

Later saying you have a missed call, voicemail or message, the letters include a link. The bulletin may also say the voicemail message will be automatically deleted if yous don't access it.

Case: Android'southward spam/blocked folder with several scam messages

Case: A scam message maxim that a voicemail message was received.

Example: A simulated vox message notification on an iPhone

Case: A text message saying that the recipient missed a call.

Example: An iPhone notification showing a scam message about a missed phone call.

What happens if you click or tap the link

Clicking/borer the link could lead to downloading malware (malicious software) to your telephone.

Here's what each blazon of scam looks like.

For photo upload texts

You'll see a screen with:

• a alarm that your device has been infected with Flubot
• a push button or link that asks you to 'install security update'

The page sometimes says that a window may announced preventing the installation and that you lot should enable the instillation via your devices settings.

For delivery texts

You'll encounter a screen with:

• stolen DHL / courier branding
• a button or link asking you to download an app to track your delivery's progress

The page sometimes says your phone may flag the app equally suspicious and that you should ignore this warning.

For voicemail/missed call texts

You'll run across a screen with:

• your phone number
• a annotation saying how long the fake message is (such equally ii minutes and 34 seconds)
• a link to 'Download voicemail app' and instructions to enable the download of the application if this was blocked initially by your phone.

If you lot accept an Android device

If you have an Android device, it will download an application called Voicemail71.apk, Update42.apk' or DHL34.apk. This awarding is malware.

You lot would so be asked to install the application.

The landing page that fraudulently states your device is infected with Flubot can await similar this:

The landing page that asks you to download the fake DHL application can look similar this:

The application may be able to:

• read your text messages
• ship text messages from your telephone
• make phone calls from your number
• access your contacts

Installing the software is likely to give scammers access to your passwords and accounts. They may be able to employ this information to steal your money or personal information.

It will also enquire other infected Australian phones to send Flubot messages to the numbers information technology steals from your phone, standing and expanding the scam.

If you lot have an iPhone

If you lot accept an iPhone, you lot may see a link to download software. This software isn't the aforementioned as Flubot, but it tin still damage your device.

What to do if you lot've downloaded the Flubot

Act immediately. If you have already clicked the link to download the application, your passwords and online accounts are now at take chances from hackers.

Don't enter any passwords or log into any accounts until yous take followed the below steps. If you need to check your online banking, apply a different device to do so.

Clean your device

Cleaning your device using the steps below volition remove the malicious software from your device.

To clean your device, you can:

• contact an IT professional
• download official Android anti-virus software through the Google Play Store
• perform a factory reset of the device, as soon as possible.

The best way to brand sure that your phone is clean is to use the 'Erase all Content and Settings' or 'Factory reset' features. The exact proper noun of the feature volition depend on the device you take. Performing this reset of your device volition delete all of your data including photos, messages, and authentication applications.

When performing a factory reset it's of import that yous don't restore from any backups created afterwards you downloaded the app, equally they volition be infected.

Alter your passwords and secure your information

If you take logged in to any accounts or apps using a password since downloading the app, you need to change your passwords.

If you lot take used the same passwords for any other accounts, you as well demand to change those passwords.

Contact your banking concern and ensure your accounts are secure.

How to protect yourself

• Practice not click on links in text letters that contain a link with a series of random numbers and messages.
• Practice not call dorsum the individual who sent the text. It'south unlikely that they are a scammer or criminal. Scammers can disguise their caller ID as legitimate numbers to carry out these scams. This is also known as spoofing.
• Delete the message immediately.
• Learn more than about FluBot scams and other relevant phone scams at the ID Care website .

Have you lot been scammed?

• Make a report to ReportCyber if you take been a victim of this cybercrime.
• Nosotros encourage you to report scams to the ACCC via the written report a scam folio. This helps us to warn people nigh current scams, monitor trends and disrupt scams where possible. Please include details of the scam contact you received, for case by including the email or screenshot.
• If you have lost personal data to a scammer and are concerned, you can contact IDCARE.
• Spread the word to your friends and family unit to protect them.

Publication history

• 23 August 2021: We first published this alert nigh Flubot.
• 7 September 2021: We updated this warning with more than information about fake bundle delivery messages.
• 22 September: We updated this alert with more information about messages relating to Amazon
• 7 Oct: Nosotros updated this warning with more information about photo upload texts and information about Flubot scammers regularly updating their text message wording.

loftinfeling.blogspot.com

Source: https://www.scamwatch.gov.au/news-alerts/missed-delivery-call-or-voicemail-flubot-scams

Share this post