Don't make this mistake while looking for obscene content on Instagram and Facebook; the government has issued an alert..
The Government of India has issued a critical cybersecurity alert for Android phone users. The government has warned that attempts are being made to trick users into downloading dangerous apps under the guise of offering adult content on Facebook and Instagram. While these apps may appear to be legitimate adult content applications, once installed, they can compromise personal data and even sensitive banking information.
This warning has been issued by the National Cybercrime Threat Analytics Unit (NCTAU) of the Indian Cyber Crime Coordination Centre (I4C) and the Ministry of Home Affairs. The advisory specifically names apps such as Night Play, Reloop, Kyss, Vimo, Rivo, Nexo, and Vixa.
**The scheme begins with social media advertisements**
According to the government, this cyber fraud tactic originates from advertisements or links seen on social media. Users might encounter ads related to adult content on Facebook or Instagram. Clicking on such an ad can redirect the user to a website where they are prompted to download an Android app's APK file to view the content. The risk is heightened because these APK files are downloaded from sources outside the Google Play Store; consequently, they do not undergo the standard security checks required for apps on official stores.
**Risk escalates upon app installation**
Once the APK is installed on the phone, the app may prompt the installation of another application under the guise of an update. Subsequently, the app may request various permissions from the user. Among the most dangerous is the request for "Accessibility Access." While this feature was originally designed to assist users with disabilities, it can be misused if it falls into the wrong hands. With such permissions granted, cybercriminals can remotely control parts of the phone, run malicious software in the background, and attempt unauthorized financial transactions. Some apps may also install a VPN on the device. This can route the phone's internet traffic through servers controlled by attackers, thereby increasing the risk of personal data leakage.
Removing the app might also be difficult.
The government has stated that certain malicious apps can be designed in such a way that they are not easily removed from the phone using standard methods. Therefore, if you notice unusual activity on your phone after installing an unfamiliar app, exercise caution immediately. The government advises downloading apps only from trusted sources like the Google Play Store. Do not install APK files obtained from advertisements, unknown websites, or suspicious links. Additionally, avoid granting accessibility permissions to unknown apps and keep Google Play Protect enabled on your phone. You should also install Android updates promptly.
Keep an eye on bank and UPI transactions.
The threat posed by such apps is not limited to the phone itself. If a malicious app gains necessary permissions, banking and UPI-related transactions could also be compromised. Consequently, the government advises people to regularly monitor their bank accounts and UPI transactions. If you spot a transaction that you did not initiate, contact your bank immediately.
What to do if a suspicious app is on your phone?
If a suspicious app cannot be deleted through standard means, you can restart your phone in 'Safe Mode'. Afterward, go to Settings, locate the unknown app in the list of apps, and attempt to remove it. If the problem persists, you can opt to perform a factory reset after backing up essential data. If someone falls victim to cyber fraud or discovers a suspicious app, they can file a complaint via the 1930 helpline or through the National Cybercrime Reporting Portal.
Disclaimer: This content has been sourced and edited from TV9. While we have made modifications for clarity and presentation, the original content belongs to its respective authors and website. We do not claim ownership of the content.
