Every Mobile May Be At Risk Of Cyber Attack
Hyderabad cyber crime DSP Srinivas said several cases of financial fraud involving newly downloaded mobile applications had been reported recently
Hyderabad: Cybercriminals are targeting mobile phone users through malicious apps released under different names, exposing them to the risk of personal data theft and financial fraud, police officials have warned.
The threat has come into focus following recent investigations by the Hyderabad Zonal Enforcement Directorate (ED). Officials said cybercriminals were adopting different methods to gain access to mobile phones and obtain sensitive information.
Hyderabad cyber crime DSP Srinivas said several cases of financial fraud involving newly downloaded mobile applications had been reported recently. On average, about three such cases were being reported every month, he said.
He said downloading mobile apps without verifying their authenticity and filling in forms without reading the information provided could expose users to data theft and financial losses.
Police have identified three major types of cyberattacks targeting mobile phones — malware, spyware and phishing.
Malware attacks involve malicious software designed to steal personal information or display fake advertisements. Officials said downloading and installing Android Package Kit (APK) files from unknown websites increased the risk of such attacks.
Spyware is another form of malicious software that secretly monitors users' activities. It can be used to obtain personal information, location details, messages and other data stored on mobile phones.
Phishing, one of the most common methods employed by cybercriminals, involves sending fraudulent messages to persuade users to click on links leading to fake websites.
Such messages may claim that a bank account has been blocked, a parcel has been held up, a gift has been received or an account requires immediate verification. Users are then directed to fraudulent websites where they may be asked to disclose one-time passwords (OTPs), passwords and other sensitive information.
Recent raids by ED officials also revealed that an international gang had allegedly used similar methods to target Americans and defraud them of crores of rupees.
Vaishnavi Tejaswini, an employee of a multinational company, said mobile users should exercise caution while responding to requests for personal information. She advised users against sharing OTPs, particularly with unknown persons, as such requests could be attempts at fraud.
Karimnagar police commissionerate deputy analytical officer K. Viraj Shekhar said cyberattacks generally required victims to perform an action, such as clicking a link, downloading a file or installing an application. However, he said mobile users also faced the risk of zero-click attacks, which could occur without any action by the victim.
He said such attacks were difficult for users to detect. With banking services, electricity bill payments and other financial transactions increasingly being conducted online, mobile devices remained vulnerable to cyber threats. Regularly updating mobile operating systems and applications could help reduce the risk of such attacks, he said.