A new type of banking scam has been observed in India. Till now, scammers were sending apk files to people and hacking the devices using the malicious software in apk files. Now, scammers are sending Wedding cards to people and stealing money from Bank accounts.
Once the Wedding Card gets downloaded in users device, it installs malicious software in the device and scammers get access to that device. After it, scammers exploit the financial data stored on device and use OTPs and PINs to withdraw money from your bank account.
In a recent case from Bikaner, Rajasthan, a man lost ₹4.5 lakh just four days after opening a wedding card document sent from an unknown number.
States Issue Cybersecurity Warnings
Cyber departments in Himachal Pradesh, Rajasthan, Uttar Pradesh, and Gujarat have issued alerts warning citizens against opening such documents.
The Ahmedabad Cyber Crime department highlighted the issue in a post on X (formerly Twitter):
“Fake wedding cards sent via WhatsApp are draining bank accounts. After clicking on the malicious APK file disguised as a wedding card, it auto-installs on the device and hacks it.”
Rising Cybercrime in India
Cyberattacks are becoming more sophisticated and frequent in India. Data from the Indian Cybercrime Coordination Centre (I4C) shows alarming financial losses in 2023:
- ₹120.30 crore lost to digital arrest scams
- ₹1,420.48 crore in trading scams
- ₹222.58 crore in investment scams
- ₹13.23 crore in romance/dating scams
In the first four months of 2024 alone, over 740,000 complaints were reported, with losses exceeding ₹1,750 crore.
The Larger Threat
Malicious APK files can give attackers complete control of your device. They can access SMS messages, WhatsApp chats, net banking apps, and more. For instance, they can initiate a net banking transaction, intercept the OTP, and drain your account. Once they gain control of your phone, they can also impersonate you and target your contacts with similar scams.
How to Stay Safe
- Do not click on suspicious links or open unsolicited files, especially from unknown numbers.
- Install trusted antivirus or malware-protection apps on your device.
- Regularly monitor your bank accounts for unauthorized transactions.
- Be cautious of messages or files that create a sense of urgency or excitement.
- Cybersecurity experts stress the importance of vigilance and awareness in combating these evolving scams.