The Cyber Police of Ukraine have warned of a new fraud scheme in which perpetrators distribute malicious applications disguised as free offline navigation apps that can gain access to users’ personal data and banking services.
According to the Cyber Police, potential victims are offered a navigation app that supposedly works without an internet connection, contains no advertising and is available free of charge. Advertisements for such applications are distributed primarily through social media.
After clicking on an advertisement, users are redirected to a third-party website where they are offered a program to download, including through a Telegram bot. Instead of the advertised navigation app, a malicious file may be installed on the smartphone.
During installation, the program requests permission to download applications from unknown sources, as well as access to certain smartphone functions. After obtaining these permissions, perpetrators can track the device owner’s actions, intercept messages and notifications, and obtain confidential information.
The malicious program’s access to SMS messages and system notifications poses a particular threat. The information obtained may be used to intercept verification codes and access the user’s accounts and financial services.
The Cyber Police recommend installing mobile applications exclusively from the official Google Play and App Store marketplaces and not downloading APK files through Telegram bots, unknown websites or advertising links.
Users are also advised to carefully check the permissions requested by an application. In particular, a navigation program should not gain access to SMS messages, notifications or device management functions without an objective need.
If a suspicious application has already been installed, specialists recommend temporarily refraining from using banking and other critically important services on that smartphone, disconnecting the device from the internet and changing the passwords for primary accounts from another secure device.
The suspicious program should be removed, and the permissions granted to it should be checked. If the application cannot be removed or continues to run in the background, seeking technical assistance is recommended.
If banking details have been disclosed or unknown transactions appear, users must immediately contact their bank to block possible unauthorized access to their accounts. Cases of fraud can be reported to the Cyber Police through their official online form.
The Cyber Police also recommend checking information about current fraud schemes on the government platform StopFraud.
Source: Cyber Police of Ukraine
APPLICATION, BANK, CYBER POLICE, CYBERSECURITY, fraud, smartphone
