MMS Mobile Malware (Flubot)

An overview of the Flubot MMS scam, currently affecting Android devices

MMS Mobile  Malware (Flubot)

We have been made aware of a Flubot MMS scam which is affecting any Android device on any mobile network. iPhones are currently unaffected.


What's happening?

We have been notified by a UK network operator that mobile networks are seeing a significant rise in Flubot victims again. This current bout of malware was first identified on Wednesday 27th April 2022 and each day we are seeing increased incidents.

Flubot is a text message or MMS scam - part of a large-scale attack using a malware named Flubot.

It’s currently only impacting Android devices and is downloaded under the guise of a tracking app or a message with a link to retrieve a voicemail which is installed when the user clicks on the attached link.  

If the  customer installs the app the malware is able to take over their device and  this allows more infected SMS/MMS to be sent to contacts within the device without their knowledge.  

The customer’s contacts and banking apps may then be accessed by the fraudster.


What can I do?

The advice is to stay vigilant and to always be very careful about clicking on any links received by MMS or SMS.

If you are concerned, we would recommend that you visit the National Cyber Security Centre website and follow the advice on how to remove malware from your device.

Please note:
this action includes performing a factory reset which will also wipe data, Photos, contacts etc.


We are also  undertaking our own checks based on the CDR records we get from our providers to identify any suspicious MMS usage and will contact any affected customers in due course.

If you have any concerns or questions, please do not hesitate to get in touch, and we will do our best to help.