Android users in India have been alerted after being warned by the government about a growing campaign involving cyber fraud through fake adult apps. Malicious apps advertised on social media sites such as Facebook and Instagram are being promoted and trick people into installing suspicious software.
The Ministry of Home Affairs’ Indian Cyber Crime Coordination Centre (I4C) through the National Cybercrime Threat Analytics Unit (NCTAU) said it is observing an increasing trend of financial frauds using Android apps pretending to be pornography and adult content applications.
Money being drained using fake adult apps
According to the advisory issued by the government, fake apps are being marketed under names like Night Play, Reloop, Kyss, Vimo, Rivo, Nexo, Vixa, and a few similar names. “The concerned Android applications are being spread through advertisement (click & download from malicious websites via Facebook and Instagram) and their main intent is to fraudulently induce users to download and install a risky Android app,” the advisory said.
These apps, however, are far more problematic because of the permissions and access they seek after being downloaded on an Android device.
Cybercriminals are said to run ads displaying sexual or suggestive content to attract unsuspecting victims. Users clicking such an advertisement are directed to websites, where they are encouraged to download an APK file (an Android application package) not through a legitimate app store. This is known as sideloading an app and bypasses the security and scrutiny that most apps available on Google Play are subject to.
How malware installed by a fake adult app can get control of your phone
The serious issue arises once these fake applications are installed. As cautioned by the authorities, these apps exploit the Android accessibility permissions, potentially to gain a deeper level of control over a user’s phone. This can give apps capabilities such as observing activity, interacting with other apps on the device, and accessing confidential data.
More specifically, the government warns that such apps could extract data from phones, obtain one-time passwords (OTPs), get hold of banking PINs, and subsequently authorize transactions without the user’s consent. This implies that a person might not have to enter their banking details manually into a fake form for their money to be stolen. An illicitly granted access level could enable apps to access sensitive information directly from a device.
Why the fake adult app craze can prove so harmful like India
This development further suggests how cybercriminals are gradually turning the web into their playground by leveraging legitimate platforms like social media for spreading fraud. The case highlighted involves fake adult-content advertisements appearing on Facebook and Instagram. While Facebook’s parent Meta told Reuters that it subsequently removed dozens of ads after the warning was published, several appeared to be still visible at the time of the report.
The modus operandi is simple: use curiosity as a hook. Draw clicks from people intrigued by sensational ads and then trick them into downloading a dangerous app. This makes such scams difficult to detect, as the advertisement itself might not scream “financial fraud”.
Government Advisory for Android Users
To stay safe from such cyber frauds, the government advises all Android users to be cautiously vigilant, especially when downloading applications from new and unknown sources, unfamiliar websites or when redirected from social media promotions. It urges users to not download APK files from untrusted origins and to carefully assess the permissions asked by apps, particularly those that are completely irrelevant to the app’s supposed functions, such as entertainment apps asking for pervasive accessibility access.
Users should update their Android operating systems and security software on a regular basis, and always download apps from official sources.
What To Do If You Have Installed a Suspicious App
If you suspect you have downloaded and installed any of these fake adult apps, you should immediately take the following measures: First, disconnect the device from the internet if you have reason to believe it’s actively being controlled remotely. Check the permissions of any suspect apps and uninstall them without delay. Examine bank account statements and UPI apps for any suspicious activity.
Update important passwords from another safe device.
If you have lost money, report the cyber fraud by calling the 1930 cyber fraud helpline in India.
Growing Threat of Online Fraud
The latest advisory comes at a time when India continues to grapple with a rise in digital financial fraud amid increased adoption of online banking, UPI and mobile payment services. The recent crackdown on malicious apps showcases the ever-evolving strategies of cyber fraudsters. They are no longer solely relying on email phishing and fraudulent websites but are increasingly leveraging advanced tactics such as manipulating Android app capabilities, exploiting social media advertisements, and using tempting or sexually suggestive content to fool unsuspecting users.
The cardinal takeaway for every Android user is that the promise of adult entertainment in an unsolicited ad is never worth the risk.
Downloading an APK file from an unreliable source and authorizing extensive permissions opens a gateway for cyber criminals, and your financial safety could be just a click away from compromising.
