One click, one download: How social media ads can lead to malware, financial fraud
An Instagram advertisement can lead to a malicious app being downloaded onto a user's phone, resulting in financial fraud according to the Indian Cyber Crime Coordination Centre (I4C). The apps, such as Night Play and Reloop, are often disguised as entertainment or adult content and are promoted through Instagram ads. Once installed, the malware can gain accessibility permissions, allowing it to control the device and install additional applications.
The apps may also install a VPN to route internet traffic through attacker-controlled servers, putting users at risk of unauthorised financial transactions and other forms of cyber fraud. To avoid such scams, users are advised to download apps only from trusted sources like the Google Play Store, avoid downloading APKs from advertisements, and be cautious with sensitive permissions like accessibility and VPN access.
Written by urgent.news from The Indian Express's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
