1 week ago
Fake RTO APK Scam Misuses IPS Photo to Steal Data
Cybercriminals sent people a fake message on WhatsApp.
The message said their vehicle had an unpaid traffic fine.
It included a harmful phone application, called an APK, that pretended to be from the Regional Transport Office.
The criminals used a police officer’s photograph to make the message look real.
They also used a WhatsApp account registered in a woman’s name.
Police said the account had been hacked on July 30.
If someone installs the fake application, criminals may be able to control the phone secretly.
They could steal private information such as photos, messages, banking details and OTPs.
Police have opened a case and warned people to be careful.
Police registered a case against unidentified cybercriminals for circulating a malicious APK posing as an RTO communication.
The WhatsApp message falsely claimed recipients had an outstanding traffic fine on their vehicle.
Scammers allegedly used an account in a woman’s name and an IPS officer’s official photograph to appear credible.
Police said the hacked account was compromised on July 30 and the officer’s photograph may have been taken from a government website.
Installing the APK could let attackers access contacts, messages, photos, documents, banking credentials and OTPs.
- Who
- Unidentified cybercriminals, an allegedly hacked WhatsApp account holder, and police including head constable MN Wagh.
- What
- A malicious APK posing as an RTO communication was circulated to steal sensitive information from WhatsApp users.
- Where
- The complaint was filed with the Cyber Police Station, Chhatrapati Sambhajinagar Rural, after suspicious activity was flagged on Threads.
- When
- Police said the WhatsApp account was hacked on July 30; the report does not specify when the case was registered.
- Why
- The scammers allegedly sought unauthorised access to victims’ phones and their personal, banking and authentication data.
Key facts
- Fraud lure
- A false claim that the recipient’s vehicle had an outstanding traffic fine.
- Distribution channel
- WhatsApp.
- Impersonation method
- An account in a woman’s name used the official photograph of the Superintendent of Police, Chhatrapati Sambhajinagar Rural.
- Account status
- Police said the WhatsApp account had been hacked on July 30.
- Potentially stolen data
- Contacts, text messages, private photographs, personal documents, banking credentials and OTPs.
- Police action
- A case was registered against unidentified cybercriminals.
- Legal provisions
- Sections 66C and 66D of the Information Technology Act.
Sources
Related news
Nashik Businessman Loses ₹6 Lakh in Fake mParivahan APK Scam
Fake RTO E-Challan Case: Gujarat Police Arrest Jamtara Gang Aide
Banker loses Rs 4.27 lakh in CSMT Wi-Fi malware scam
Kharghar Resident Loses ₹8.39 Lakh in APK Cyber Fraud
APK scams cost Navi Mumbai ₹2.68 crore in 42 cases
India Warns of Fake Porn Apps Stealing Android Banking Details
Pune Sugar Trader Loses Rs 3 Crore in Whale-Phishing Attack
Mumbai CA Targeted After Lost Phone, Photos Allegedly Morphed
Mumbai Police Book Two Over Provocative Clash Videos
Two Thane Seniors Lose Rs 15.73 Lakh in Voter Fraud
Two Men Arrested In Pune Cyber Fraud Bank Account Case
