Posted: Mon 26th Apr 2021

Deeside residents amongst thousands being targeted with bogus “DHL parcel delivery” text messages

News and Info from Deeside, Flintshire, North Wales
This article is old - Published: Monday, Apr 26th, 2021


Campaign Advert

Several people have been in touch over the past few days warning about a scam message they have received via SMS text.

The message pretends to be from a package delivery firm such as DHL, it asks users to install a tracking app – which is actually a malicious piece of spyware.

The National Cyber Security Centre (NCSC) – a part of GCHQ – has said the spyware, known as ‘FluBot.’

It is installed when a victim receives clicks on a link in a text message, asking them to install a tracking app due to a ‘missed package delivery’.

The tracking app is in fact spyware that steals passwords and other sensitive data. It will also access contact details and send out additional text messages – further spreading the spyware.

The text message requests that victims click a link. Doing so directs them to a scam website, such as the one shown below (although the branding may vary).

  • Users of Android devices (such as those manufactured by Google, Huawei and Samsung) will be encouraged to download an app.
  • Users of Apple devices are not currently at risk, although the scam text messages may still redirect them to a scam website which may to steal your personal information.

If you receive a scam text message:

  1. Do not click the link in the message, and do not install any apps if prompted.
  2. Forward the message to 7726, a free spam-reporting service provided by phone operators.
  3. Delete the message.

If you were expecting a DHL delivery, you should visit the official DHL website (track.dhlparcel.co.uk) to track your delivery. Do not use the link in the scam text message.

If you have already clicked the link to download the application:

You must take the following steps to clean your device, as your passwords and online accounts are now at risk from hackers.

  • Do not enter your password, or log into any accounts until you have followed the below steps.
  • To clean your device, you should:

– Perform a factory reset as soon as possible. The process for doing this will vary based on the device manufacturer and guidance can be found here. Note that if you don’t have backups enabled, you will lose data.

– When you set up the device after the reset, it may ask you if you want to restore from a backup. You should avoid restoring from any backups created after you downloaded the app, as they will also be infected.

  • To protect your accounts:

– If you have logged in to any accounts or apps using a password since downloading the app, that account password needs to be changed.

– If you have used these same passwords for any other accounts, then these also need to be changed.

To protect yourself from future scams like this, you should:

  1. Back up your device to ensure you don’t lose important information like photos and documents. The CyberAware campaign explains how to do this.
  2. Only install new apps onto your device from the app store that your manufacturer recommends. For example, most Android devices use Google’s Play Store. Some manufacturers, such as Huawei, provide their own app store.
  3. For Android devices, make sure that Google’s Play Protect service is enabled if your device supports it. Some Huawei devices provide a similar tool to scan devices for viruses. This will ensure that any malware on your device can be detected and removed.

Footnote – While messages so far have claimed to be from DHL, the scam could change to abuse other company brands. 

Spotted something? Got a story? Send a Facebook Message | A direct message on Twitter | Email: [email protected]
Latest News

  • Senedd: Ex-Minister admits errors in implementing Wales’ 20mph speed limit
  • Rishi Sunak announces general election on July 4
  • Natural Resources Wales urges North Wales residents to monitor weather and flood alerts

  • More...

    Senedd: Ex-Minister admits errors in implementing Wales’ 20mph speed limit

    News

    Rishi Sunak announces general election on July 4

    News

    Natural Resources Wales urges North Wales residents to monitor weather and flood alerts

    News

    Flint: Increase in police patrols after ’20 youths seen fighting’ on Church Street

    News

    Flintshire bin collection delays due to “technical issues” as fleet provider faces administration

    News

    UK inflation falls to lowest level in nearly three years

    News

    Met Office issues Amber weather alert with heavy rain and possible flooding in Flintshire

    News

    Wylfa chosen as UK Government’s top site for “mega-nuclear” power plant

    News

    Vet bills ‘soaring due to corporate greed’ Senedd committee heard

    News