Scammers have started using fake VPN applications to gain full control over Russian citizens' smartphones. After installing such a program, attackers can access the phone owner's banking application and steal their money. This is stated in the materials of the Russian Ministry of Internal Affairs.
Fraudsters send users applications disguised as regular VPNs, law enforcement officials warned. A person installs the program, after which scammers gain the ability to control their mobile device.
Having gained control over the smartphone, attackers can access the banking application and withdraw funds from the account.
Amidst the spread of this scheme, the Ministry of Internal Affairs advises against installing applications from unverified sources.
What else is known about schemes with fake applications
The scheme with a fake VPN giving scammers full control over a smartphone is not unique. We previously reported how fraudsters, through a fake VPN client, issued microloans to unsuspecting people: the victim learned about the debt only after the money was debited. The infection mechanism is almost identical – a link in a messenger, application installation, full access to the device.
We also previously wrote about a Trojan that spread on Telegram disguised as an application for finding road cameras: after installation, the malware intercepted SMS from banks and allowed attackers to confirm transactions without the phone owner's knowledge. And even earlier, we reported on malicious APK files that scammers distributed under the guise of corporate applications from employers – the functionality of such programs allowed real-time access to correspondence, contacts, and remote device management.
Комментарии