FluBot is Android banking malware that commonly spreads through SMS messages sent to contacts on an infected device. This February 2022 article documents the threat and the infection activity visible to Bitsight at the time.
The publication combines distribution context with available telemetry and shares indicators of compromise. It also includes a Python implementation of FluBot’s version 3 domain-generation algorithm, connecting malware analysis with the infrastructure used for command and control.
Read the findings as a historical snapshot. Geographic patterns and indicators are tied to the observed collection period and should not be treated as evidence that the same infrastructure remains active.