New Delhi, July 12, 2024 – A sophisticated Android malware campaign orchestrated by Vietnamese hackers is targeting Indian users through fake traffic e-challan messages on WhatsApp, according to a report by CloudSEK, a cybersecurity firm. The malware, identified as part of the Wromba family, has already infected over 4,400 devices and resulted in fraudulent transactions exceeding Rs. 16 lakh.
The Scam Explained
Scammers are sending messages impersonating Parivahan Sewa or Karnataka Police, tricking users into downloading a malicious app. This app, disguised as a legitimate application, requests excessive permissions, including access to contacts, phone calls, SMS messages, and the ability to become the default messaging app. Once installed, the malware intercepts OTPs and other sensitive messages, enabling attackers to log into victims’ e-commerce accounts, purchase gift cards, and redeem them undetected.
Modus Operandi
Vikas Kundu, Threat Researcher at CloudSEK, explained that the app extracts all contacts to scam more users. All SMS messages are forwarded to the threat actors, allowing them to log into various e-commerce and financial apps of the victim. By using proxy IPs, the attackers avoid detection and maintain a low transaction profile. The malware has facilitated the acquisition of 271 unique gift cards, conducting transactions worth Rs 16,31,000. Gujarat is the most affected region, followed by Karnataka.
Protection Measures
To safeguard against such malware threats, CloudSEK advises users to:
- Install Apps from Trusted Sources: Use only reputable sources like the Google Play Store.
- Limit App Permissions: Regularly review and limit app permissions to the minimum necessary.
- Maintain Updated Systems: Keep all devices and systems up-to-date with the latest security patches.
- Enable Alerts for Banking and Sensitive Services: Set up alerts to monitor any suspicious activity promptly.
Conclusion
This alarming development underscores the importance of cybersecurity awareness. Users must remain vigilant, especially when receiving unsolicited messages on platforms like WhatsApp. For more in-depth analysis and updates on this evolving story, stay tuned to Newsd.in.
