Mobile Hacking Alert: 8th Pay Commission Scam Exposed – FCRF Issues High-Alert Advisory

Mobile-Hacking-Alert-8th-Pay-Commission-Scam-Exposed-FCRF-Issues-High-Alert-Advisorydata

Mobile Malware Campaign Exploits 8th Pay Commission Theme to Target Government Employees

A high-alert advisory has been issued by the Future Crime Research Foundation (FCRF) regarding a targeted mobile spyware attack disguised as a fake APK campaign related to the 8th Pay Commission.

How the Campaign Works

The malicious software, which is being circulated via WhatsApp, Telegram, SMS, and other platforms, is designed to compromise device security and access sensitive financial data.

The campaign relies on social engineering tactics to lure government employees and pensioners into downloading files labeled as “Pay Commission Calculator” or “New Salary Update.” These files are, in fact, malicious software that can grant attackers unauthorized access to sensitive information.

Prevention and Mitigation Measures

To mitigate the risk of infection, the FCRF has advised users to exercise extreme caution when downloading and installing APK files from unknown sources.

  • If a suspicious file has already been installed, users should immediately disconnect their phone from the internet and Wi-Fi, uninstall the app in safe mode, and change all banking and social media passwords.
  • In addition to these immediate actions, the FCRF has recommended that users reset their UPI PINs and net banking credentials, inform their bank about potential fraud, and report the incident on the cyber helpline 1930.
  • In high-risk cases, users may need to back up essential data and perform a factory reset.

Best Practices to Avoid Similar Attacks

To prevent similar attacks in the future, the FCRF has urged users to regularly review app permissions and remove applications that have unnecessary access to sensitive features such as SMS, accessibility, notifications, or screen recording.

Users should also avoid storing banking passwords, card details, or sensitive documents on their mobile devices and limit autofill features.

Official Updates and Information

The FCRF has emphasized that official updates related to the Pay Commission are only released through government portals, and users should not rely on third-party applications or messaging platforms for such information.

By being vigilant and relying on official sources, users can significantly reduce the risk of falling prey to mobile malware campaigns.

Psychological Exploitation

The FCRF has noted that attacks like these often exploit user psychology more than technical vulnerabilities, using messages that promise “instant benefits” or “higher salary calculations” to trigger impulsive actions that weaken device security.

By staying informed and taking prompt action, users can protect themselves against such threats and prevent financial losses.



About Author

en_USEnglish