MHA issues advisory on malicious Android apps used to steal money, take control of phones
An advisory issued on August 26 identified apps operating under names such as “Night Play”, “Reloop”, “Kyss”, “Vimo”, “Rivo”, “Nexo” and “Vixa”
The Indian Cyber Crime Coordination Centre (I4C) has issued a warning about malicious Android applications being used for financial fraud. These apps, often disguised as pornography apps, are promoted through social media advertisements. The National Cybercrime Threat Analytics Unit (NCTAU) identified applications with names like "Night Play", "Reloop", "Kyss", "Vimo", "Rivo", "Nexo", and "Vixa".
Users are initially drawn to these apps by ads for adult content, which then prompt them to download APK files from untrusted sources. Once installed, these apps request sensitive permissions, such as Accessibility access, allowing attackers to control the device and perform unauthorized transactions. The malware can read displayed information, click buttons, enter OTPs or PINs, and initiate fund transfers.
It might also download additional apps disguised as updates and install a VPN, which could expose user data to further misuse. The apps often resist uninstallation, making removal a difficult process. Users are advised to only download apps from trusted stores, avoid granting Accessibility permissions to unknown apps, and regularly monitor their bank accounts for suspicious activity.
If a device is compromised, users should restart it in Safe Mode, uninstall suspicious apps, disable Accessibility access, and perform a factory reset if necessary. The cybercrime unit urges citizens to report fraudulent applications or incidents to the national helpline or the cybercrime reporting portal.
Written by urgent.news from Hindustan Times's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
