CYFIRMA Research - Pakistan-based Threat Actor Targets Indians with Fake Loan Android Application
Manage episode 397307016 series 3472819
The CYFIRMA team recently discovered a malicious Android package orchestrating a sophisticated extortion scheme. Masked as a loan app promising quick funds, unsuspecting users are duped into revealing sensitive information during the installation process.
The deceptive app coerces victims into submitting KYC details, including a selfie, gradually acquiring a wealth of personal data. Once armed with a government ID, contact list, and text messages, threat actors manipulate selfies into compromising content. Subsequently, they exploit the situation, attempting extortion by threatening to distribute the manipulated images. Although the demanded amount is minimal, persistent messages and calls create pressure on victims to comply. CYFIRMA seized the #malicious package, during an ongoing incident, initiating social engineering to glean more insights into the threat actor. For comprehensive details, see our report.
Link to the Research Report: Pakistan-based Threat Actor Targets Indians with Fake Loan Android Application - CYFIRMA
#CYFIRMA #Android #extortion #loanapp #socialengineering #Cybersecurity #ThreatDetection #StayProtected #ExternalThreatLandscapeManagement #ETLM #CyfirmaResearch
https://www.cyfirma.com/
139 episodes