Watch out: These fake porn apps are sneaking onto Android phones to steal money
A recent increase in financial fraud cases in India has been linked to the distribution of malicious Android applications posing as adult content and promoted via Facebook and Instagram ads. The National Cybercrime Threat Analytics Unit, part of the Ministry of Home Affairs' Indian Cyber Crime Coordination Centre, has issued a warning to the public.
These applications, including Night Play, Reloop, Kyss, Vimo, Rivo, Nexo, and Vixa, are designed to trick users into downloading malware that can steal personal and financial data. The malware infiltrates devices via advertisements that lead to pornographic websites, and once installed, the app uses permissions to install more malicious apps and control the device.
Some also install a VPN to route malicious traffic. Users are advised against sharing sensitive information like OTPs, PINs, passwords, CVV numbers, or banking details, and to avoid clicking links from suspicious messages or calls pretending to be from banks, police, or government officials. To stay safe, individuals should verify any urgent requests through official channels, use strong passwords and two-factor authentication, keep software updated, download apps only from trusted sources, and be cautious with QR codes, unknown video calls, and unfamiliar payment accounts.
Any victims of online fraud should report the incident to the national cybercrime helpline at 1930 or via the official portal www.cybercrime.gov.in to help prevent further fraud.
Written by urgent.news from The Indian Express's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
- MHA issues advisory on malicious Android apps used to steal money, take control of phones hindustantimes.com
- Watch out: These fake porn apps are sneaking onto Android phones to steal money indianexpress.com
- I tried 2 of the best third-party Android weather apps. Here’s the one I’m sticking with androidauthority.com