Malicious 'Challan' APK Scam Exposed: ₹3 Crore Cyber Heist in Ghaziabad

Post Views: 14

Cybercrime Ring Dismantled: 3 Suspects Arrested for ₹3 Crore Scam

A sophisticated cybercrime ring that used malicious Android apps to swindle victims out of nearly ₹3 crore has been dismantled, with three suspects apprehended in Ghaziabad. The gang is believed to be responsible for at least 94 cases of cyber fraud across the country.

Modus Operandi

According to investigators, the suspects – Pintu, Adarsh, and Prashant, residents of Bihar and Jharkhand – circulated fake Android Package Kit (APK) files disguised as traffic challans, RTO notices, banking alerts, and legitimate mobile applications. These files were primarily shared via messaging platforms, prompting recipients to install the malicious software.

Once installed, the APK files compromised the victim’s mobile device, granting the suspects access to sensitive information, including banking credentials, one-time passwords (OTPs), contact lists, and other personal data.

The suspects then used this information to siphon money from victims’ bank accounts into pre-arranged accounts, before withdrawing or rerouting the funds to conceal the digital trail.

Operation and Investigation

The gang operated in a calculated and decentralized manner, targeting victims across multiple states to avoid detection. They employed layered bank accounts and staggered fund transfers, making it challenging to track the stolen money.

During the operation, authorities seized 12 mobile phones, two laptops, eight SIM cards, and a car suspected to have been used in coordinating the activities. The electronic devices have been sent for forensic examination to determine the full extent of the fraud and identify additional victims or collaborators.

Warning from Cybersecurity Experts

Cybersecurity experts have warned of a significant rise in malicious APK file-based fraud in recent months. The use of such tactics by cybercrime rings highlights the need for increased vigilance and awareness among mobile device users.

The suspects’ use of social engineering tactics and malicious APK files demonstrates the evolving nature of cyber threats. As such, it is essential for individuals to exercise caution when receiving unsolicited messages or installing software on their mobile devices.