Attackers have come up with a new way to extort money. They post ads looking for mobile app testers, promising generous rewards, and as a first task, they send a malicious APK file. It allows access to the victim's bank account, F6 said.
Attackers post ads looking for mobile app testers with an income of 3,000 to 5,000 rubles per hour, and as a first task, they send a malicious APK file that allows them to steal money from the victim's bank account.
Attackers require "applicants" to have Russian citizenship and an Android-based smartphone. They post fake vacancies on various platforms: in Telegram chats, social networks, on free ad sites, job search services and freelance platforms. They use advertising to promote their fake offers.
Scammers offer to communicate in Telegram or WhatsApp (owned by Meta*, recognized as an extremist organization and banned in the Russian Federation). In the messenger, they confirm the terms of work from the ad and ask you to fill out a questionnaire: full name, phone number, date of birth and bank card details - allegedly for transferring earnings.
F6 found that since the beginning of 2025, two groups of fraudsters have used the same scheme to steal funds. As a result of their actions, about a thousand users were affected, and the total amount of funds debited exceeded 14 million rubles. The average write-off amount was 14,624 rubles.
The new scenario with fake app testing is primarily aimed at IT specialists without work experience, students who are willing to use personal devices for app testing, which should not be done under any circumstances.
That's why scammers don't give "access" to those users who use many devices. This suggests that the potential victim is professionally engaged in testing, and it will not be possible to gain access to his mobile bank.
Earlier www1.ru warned that fraudsters are becoming more active before the long weekend and Russia Day. They hold fake sweepstakes, promise "payments for Russia Day" and send out fake notifications from banks. Also, attackers call on behalf of fake employees of the Ministry of Internal Affairs to extort money from people.
* Meta's activities are prohibited in Russia as extremist
Read more on the topic:
How to behave in a conversation with scammers: advice from the Ministry of Internal Affairs
Scammers convince Russians to take out a car loan: here's how they do it
