NEW DELHI — The Union Home Ministry’s cybercrime arm has warned of a fresh wave of malicious applications disguised as pornography platforms that can hijack Android smartphones and potentially facilitate the siphoning of funds from victims’ bank accounts.
The National Cybercrime Threat Analytics Unit, operating under the Integrated Cybercrime Coordination Centre (I4C), issued an advisory warning that the applications are being circulated through advertisements and links on Facebook and Instagram.
According to the advisory accessed by news agency Kashmir News Service (KNS), the apps operate under names including “Night Play”, “Reloop”, “Kyss”, “Vimo”, “Rivo”, “Nexo” and “Vixa”.
The applications allegedly lure users with pornographic content before redirecting them to phishing websites using “.live” domains. Users are then persuaded to download APK files from outside the Google Play Store, which the ministry described as a major security risk.
Officials said that once installed, the applications can seek permissions that allow them to install additional applications and misuse Android’s Accessibility feature to gain control of the device.
Some of the applications also install a VPN, which officials said could be used to route internet traffic linked to malicious or criminal activity.
The advisory warned that the malware can also prevent users from uninstalling it through normal device settings, making it difficult for victims to regain control of their phones.
The Ministry of Home Affairs has advised Android users to download applications only from Google Play or other trusted app stores and to avoid installing APK files received through advertisements or suspicious links.
Users have also been urged not to grant Accessibility permissions to unknown applications and to periodically review installed applications for any unfamiliar ones.
The cybercrime unit recommended keeping Google Play Protect enabled, updating Android devices regularly and monitoring bank accounts and UPI transactions for unauthorised activity.
Further investigation into the network behind the fraudulent campaigns is underway, official sources said.
Follow Us
The Kashmir Pulse is now on Google News. Subscribe our Telegram channel and Follow our WhatsApp channel for timely news updates!
