Please note that there are currently phishing messages circulating with the following subject (see below). These messages are dangerous. You are asked to download an app. If you do, your device will become infected with the Flubot virus. Android device users are vulnerable to this. You can greatly reduce the risk of smartphone viruses by only downloading applications from a standard application store, Google Play Store. If you get a message during the installation of an app that prevents the installation or warns about its safety, do not proceed. Users of iPhones use Apple's App Store by default and are therefore at less risk.
Have you received a message with one of the messages below? Forward it to suspicious@safeonweb.be and remove it.
- Amazon - beveiligingswaarschuwing:
- Dit is het VR-pakket:
- Een bedankje - van ons aan u.
- Een pakje dat wacht om opgehaald te worden
- Ga naar URL om uw overeenkoms te activeren
- Google is het telefoonnummer van dit toestel aan het verifieren. Meer informatie:
- Een heel album is hier (smj) geupload:
- Iemand heeft je foto's geupload:
- Klik hier om uw wachtwoord te resetten:
- Klik op deze link om uw verklaring van afstand te ondertekenen
- Klik op de volgende link om in te loggen op uw account:
- Klik op om deel te nemen aan een Zoom-vergadering
- U moet uw gegevens invoeren om uw pakket met DHL te ontvangen
- Uw gekochte cadeau is verzonden, bevestig alstublieft:
- Nouvel avis (livraison) :
- DHL : Votre commande arrivera bientôt.
- Votre commande sera livree par DHL demain entre 11h26 et 14h26. Suivre le progres
Did you get this message? Don't click on the link!
- Did you get this message? Don't click on the link!
- If you click on the link, it asks you to download an app. Do not do this under any circumstances. If you do, a virus is installed on your device that can access your personal data such as passwords, bank card details and your entire contact list. The virus uses your number to send messages to your contacts and also other mobile phone numbers.
- Please forward a screenshot of the message to suspicious@safeonweb.be. We will get the links in the message blocked.
- Delete the message
How can you tell if you have installed the app?
- A new app appears among your other apps.
- You cannot delete this app.
Did you install the app? Remove the virus.
Do not enter your password or log into an account until you have tried one of these solutions.
Choose whichever of these two methods that seems easiest for you. If you have any difficulties, ask for help from someone who is good with smartphones.
Method 1: Reset your device to factory settings
Getting Started:
- Turn on airplane mode on your smartphone.
- Reset your device to factory settings. The process for doing this varies depending on the manufacturer of the device. Please note that if you do not have backups enabled, you will lose your data.
- Restore your data with your backup. Note that the backup must have been made before you installed the app and the virus.
- Your apps need to be downloaded again from the app store.
Method 2: Reboot your device in "safe mode" and remove the fake app
Getting Started:
- Reboot or start the device and choose 'safe boot' or 'safe restart'. The way to do this varies from device to device. Sometimes, for example, you have to hold down the volume button at the same time as the power button. If necessary, look up how this is done for your device (make, type, version). See how to do this here.
- Your device is now in 'safe mode'. You will see this displayed somewhere on the screen.
- Now go to 'settings', 'apps'.
- Select the fake app and uninstall it.
- Turn off your device again and reboot in normal mode.
To end:
- Change all passwords of your accounts that you can access with your smartphone.
- A text message may have been sent to all your contacts in your name. Notify your contacts as soon as possible.
- If messages have been sent to your contacts from your number, you may not notice it immediately. You can see on your phone bill that mass messages have been sent, though. Contact your operator if you notice this on your bill. Misuse of your number will only stop once you have deleted the app.
How to protect yourself against future scams like this one
- Only install apps from a standard app store (Google Play Store, App Store). If you get a message during the installation of an app that prevents the installation or warns about safety, definitely do not proceed.
- Always think twice before clicking a link in a post. Chances are you'll be getting more smishing and phishing messages on behalf of other courier services in the near future.
- Activate a spam filter on your device.
- Install a virus scanner on your device.
- Block suspicious numbers.
- For Android devices, make sure that Google Play Protect is enabled if your device supports it.
