This year 2021 started with a strong phishing campaign in Spain: people received an SMS on behalf of Correos advising that an order was on the way and with a link in which, if you bite, could take control of your mobile with a malware that is difficult to uninstall.
Now, the Spanish National Police has alerted that a new phishing scam on behalf of Correos is trying to steal data from citizens or from install a Trojan on their phones to get more information. The message literally says:
Post Service, !! LAST NOTICE !!
Dear customer: To finalize the last payment of the order you need to pay a total of € 1.79 click on the link: https: // ………
The police did not want to show on their Twitter which is the link that accompanies this SMS but they do warn that “#NoPiques” because it’s just someone pretending to be the post office.
There are people who have responded to the police alert and they comment that in the last days they have received similar notifications in the form of SMS with messages similar as “we found an August package pending delivery”.
Ransomware: what it is, how it infects, and how to protect yourself
Parcel services, the bait of 2021
Different people have responded to this alert from the National Police claiming to have received similar SMS in recent days. Remember that these phishing campaigns were common during the first months of the year (not only on behalf of Correos but also on behalf of other private services such as MRW, FeDex or DHL) but after a hiatus, it seems that activity has returned on behalf of the national letter and parcel shipping service.
While waiting for more to be known about the origin of this latest phishing that has been discovered these days, it must be remembered that in the first months of this 2021 Flubot was behind many of these attacks. FluBot was the name he gave to the malware, “because its spread rate and infection vector resemble the common flu.” It is calculated that infected more than 60,000 Android terminals and 11 million phone numbers stolen.
Remember that there is an application that allows you to uninstall this malware from your smartphone, in case of having been a victim (something that would not be strange because one of each Spaniard, according to estimations, has been victims).