The message – which claims to be from a package delivery company, asks users to install a tracking application – but is actually spyware.
Called a Flubot, he can pick up devices and spy on phones to collect sensitive data, including online banking details.
The operator of the Vodafone network said that millions of text messages have already been sent across all networks. “We believe that this current wave of SMS Flubot malware attacks will gain momentum very quickly and is something that needs to be alerted to stop it from spreading,” said a spokesman.
Customers should “be especially vigilant about this malware,” he said, and be very careful when clicking on links in a text message.