A new scam tactic has been making waves on social media, targeting WhatsApp users through the disguise of wedding invitation cards sent via APK (Android Package Kit) files. The sophisticated technique employed by these fraudsters, involving the distribution of malware via a seemingly harmless APK file disguised as a wedding e-invitation. What is even more concerning is that their primary focus is on targeting vulnerable individuals, particularly the elderly and those with limited knowledge of basic IT. By assuming the identity of someone known to their victims, these scammers manipulate them into unwittingly downloading and installing the malicious app.
According to Harisfazillah Jamel, the Chief of the Open Source Community Technology Bureau in Malaysia, senior citizens are particularly vulnerable to this scam due to their potential access to substantial funds through EPF (Employees Provident Fund) and pension savings.
The Devastating Consequences of Downloading That File:
Once victims fall into the trap and proceed with downloading and installing the application, they unknowingly grant the scammers full access to their smartphones. This unauthorized access becomes a gateway for the fraudsters to exploit personal information and sensitive data, leaving victims vulnerable to a multitude of risks.
With the relentless advancement of technology, scammers have become increasingly adept at exploiting the vulnerabilities of unsuspecting individuals. This latest wave of attacks targeting elderly citizens, who often lack the necessary IT literacy, highlights the need for urgent action.
The growing prevalence of malware-infected applications poses a grave danger, particularly when the perpetrators go to great lengths to disguise their true intentions. By masquerading as familiar individuals, scammers establish a sense of trust that lures their victims into the trap. It is crucial for everyone to exercise caution and skepticism, even when approached by seemingly familiar contacts, and to thoroughly assess any requests for application downloads.
Assalamualaikum Semua
— DragonForceIO (@DragonForceIO) June 19, 2023
Baru-baru ni muncul satu modus operandi scammer baru yang telah merebak dalam komuniti rakyat negara kita. Seperti yang kami siasat, modus operandi ini menggunakan teknik menyebarkan Malware yang ditanam di dalam aplikasi (.apk) yang dinamakan sebagai ... pic.twitter.com/9n38TnjQ2g
Here are two technical solutions smartphone users can utilise via Google Play's security features to avoid falling victim to such a scam:
1.0 Manual Software Scan
1. Open the Google Play Store app.
2. Tap on the profile icon located at the top right corner of the screen.
3. Select "Play Protect."
4. Tap on "Scan" to initiate the scan.
Google Play will scan your device for any malicious software (Malware). If any suspicious software is detected, Google Play will prompt you to remove it from your mobile device.
2.0 Automatic Software Scan:
1. Open the Google Play Store app.
2. Tap on the profile icon located at the top right corner of the screen.
3. Select "Play Protect."
4. Tap on "Settings."
5. Tap on "Scan apps with Play Protect."
By following these steps, your device will automatically undergo regular scans for potential malicious software.
As the scam targeting WhatsApp users through APK files disguised as wedding invitations gains momentum, it is crucial to remain vigilant and raise awareness among both the general public and particularly vulnerable groups such as senior citizens. By providing technological education and emphasizing caution when installing applications from unofficial sources, we can protect ourselves and our loved ones from falling victim to such fraudulent schemes. Additionally, utilizing security features like Google Play Protect's manual and automatic scanning can serve as an effective defense against malware and safeguard our mobile devices and personal information.
What do you think of this newest scam tactic? Comment below.
