Cybercrime and cyberattacks have been on the rise for quite some time now, especially with more cases surfacing about digital arrests, financial scams, and whatnot. A new cyberattack has joined this lineup now, and it is probably something that many of us might fall for. We Indians celebrate weddings like anything, and if we see a wedding invitation card on our WhatsApp, then there are high chance that we will download it to view the invite. This is where things will go south for us.
An APK file disguised as a wedding invitation card has appeared in the inbox of a few people recently. The file name will be “आमंत्रण.apk” and the size of the file will be 4.5 Mb. If you click on the file then it will ask your permission to get installed, and if by chance you allow it, then malware installs on your device, compromising your bank account, pictures, and much more.
A recent incident in Rajasthan showcased the consequences of this scam, where a victim lost Rs 4.5 lakh after opening a fraudulent wedding invitation PDF. The malware gained access to the victim’s bank account information, enabling cybercriminals to steal the money.
ALSO READ | OpenAI Brings ChatGPT To WhatsApp: How To Use, Limitations & More
Wedding Invitation Scam: Modus Operandi
In a report by the Business Standard, Vikram Babbar, Partner at EY Forensic & Integrity Services – Financial Services, was quoted as saying, “A PDF document, often from an unknown number but with a familiar name, is forwarded on WhatsApp. When the victim opens it, the ‘apk’ file installs malware on their phone. This malware gains unauthorised access to sensitive data like banking apps, OTPs, and account details. Fraudsters then use this information for illicit money transfers.”
Babbar added, “These scams are more common among Android users compared to those on iOS.”
Authorities Issue Warning
CCITR (Center For Cybercrime Investigation Training & Research) and Cybercrime Division of CID Karnataka posted about this scam on their X handle and wrote, “WARNING ⚠️ Don’t RSVP to cyber scams! Don’t download fake wedding card! Be cautious of suspicious APK files claiming to be digital wedding cards. They might contain malware. Verify authenticity before downloading!”
WARNING ⚠️
Don’t RSVP to cyber scams!
Don’t download fake wedding card!
Be cautious of suspicious APK files claiming to be digital wedding cards. They might contain malware. Verify authenticity before downloading! #WeddingCardScam #Malware #CyberSafety pic.twitter.com/Ubj9GpobBp
— Cybercrime CID ಸೈಬರ್ ಕ್ರೈಮ್ ಸಿಐಡಿ (@CybercrimeCID) December 5, 2024
Cyber Police of Uttar Pradesh posted, “Beware of Whatsapp Wedding Card Scams: Don’t click any .apk file ….”
Beware of Whatsapp Wedding Card Scams:
> Don’t click any .apk file …. pic.twitter.com/4H8xkBnOSD
— Cyber Police UP (@cyberpolice_up) November 21, 2024
If you come across any such files on your WhatsApp accounts or any other place then do not download it. No matter how known the sender is, do not download or install the apk file or your cybersecurity will be compromised heavily within seconds.
