Users are increasingly facing online fraud, and cybercriminals are using new ways to target victims.
According to a report by The Times of India (TOI), global cybersecurity firm Quick Heal Technology has issued an advisory about these threats.
Seqrite Labs researchers have also discovered key trends in digital fraud that pose significant risks to users.
One of the most common scams involves fake IRCTC apps and fraudulent shopping websites. Let’s look at these scams in detail.
Fake IRCTC App Scam
Cybersecurity experts have found spyware that disguises itself as the official IRCTC app.
This fake app is designed to steal sensitive user information, including Facebook and Google account credentials, which hackers can use to access codes from Google Authenticator.
Additionally, this spyware collects users’ GPS data, network locations, and banking details. Disturbingly, hackers can also record videos through the user’s phone camera
and send them elsewhere. This malicious app gathers data from all apps installed on the phone and transfers it to a command and control center.
Fake Shopping Websites During Festivals
Hackers take advantage of the festive season by creating fake shopping websites that mimic real ones, especially during major events like Dussehra, Diwali, and Christmas.
These websites have names similar to legitimate ones, and criminals use shortened URLs to make it harder for users to distinguish between genuine and fake sites.
Fraudsters lure users by sending fake offers through WhatsApp, SMS, or email, encouraging them to provide personal information or allow access to their contacts and messages.
These fake sites often promote irresistible offers like “Special Diwali Gift” to deceive users.
QR Code Phishing and Gift Card Scams
Another prevalent scam is QR code phishing. Hackers send QR codes via SMS, social media, or email, which, when scanned, redirect users to fake websites that collect their personal
and financial data, including bank account details. Gift card scams are also on the rise.
Hackers send fake messages claiming the user has won prizes or gift cards, asking them to click a link to claim their reward.
This link leads to a malicious website, tricking users into falling victim to fraud.
