On social networks, adverts are being circulated for an allegedly free navigator with offline maps, under the guise of which malicious software is being distributed.
How the scheme works
After clicking on the advert, a specially created website opens, offering to download the “app”. To download it, users are directed to a Telegram bot, which sends the installation file.
The file is disguised as a useful application, but during installation it asks to allow installation from unknown sources and to grant access to various device functions.
Permissions requested and associated risks
During installation the “app” requests broad permissions that give access to SMS messages, contacts and notifications. The malicious software can also view on-screen information and intercept entered data.
With these rights, attackers can remotely control the smartphone and, according to reports, gain access to users’ bank accounts.
Instructions and links
The notice lists steps for victims: delete the suspicious app, change passwords for important accounts, inform banks and check transaction history. If suspicious transactions are found, they are advised to contact their bank.
They also suggest reporting the incident to the cyber police via the form: https://ticket.cyberpolice.gov.ua/ and additionally familiarise yourself with the materials on https://promo.bank.gov.ua/stopfraud/.
