Malicious ads on social media lure users into fraud: Centre

NCTAU warns of financial fraud via malicious apps disguised as porn apps that take control of devices.

NEW DELHI: The National Cybercrime Threat Analytics unit (NCTAU), under the Indian Cyber Crime Coordination Centre (I4C), has warned users of financial fraud through sideloaded malicious Android apps masquerading as porn apps which, when downloaded, take control of users’ devices by abusing accessibility permissions.NCTAU said misleading Facebook and Instagram ads under the names Night Play, Reloop, Kyss, Riva, Vima, Nexo and Vixa were redirecting users to phishing websites featuring pornographic content, with a prompt to download the APK file from outside the Google Play Store. After installation, the app requests permissions that allow it to install additional applications, enabling fraudsters to take control of the device and commit financial fraud.

Some apps also install a VPN, which may be used to route internet traffic pertaining to criminal activity. The app may prevent users from uninstalling it through device settings.Advisory asked users to install apps only from Play Store or trusted stores.