Scammers target PNB MetLife users via mobile phishing. Attackers use Telegram bots to steal data & manipulate clipboards for UPI fraud.
UPI Fraud
RTO Challan malware hijacks Android devices in India using a fake traffic ticket lure, a malicious VPN, and SMS interception to steal UPI PINs and Aadhaar data.
NexusRoute is a sophisticated Android RAT campaign impersonating Indian E-Challan/mParivahan via GitHub phishing. It steals UPI PINs and conducts surveillance using a native-backed and professionally maintained malware framework.
Kaspersky exposed Maverick, a sophisticated fileless banking Trojan targeting Brazil. It hijacks WhatsApp Web using WPPConnect for self-propagation and installs phishing overlays to steal UPI/banking data.
A sophisticated GhostBat RAT campaign targets Indian users by spoofing RTO apps (mParivahan). The malware steals UPI credentials and OTPs via phishing pages and uses a Telegram bot for C2.
Phishing Scam Alert: McAfee Uncovers a New Android Campaign Impersonating a Government Solar Program
A new phishing campaign in India uses fake government solar subsidy websites to trick victims into downloading a malicious app that steals UPI PINs and other data.
CloudSEK warns of a surge in Raksha Bandhan-themed phishing, fake websites, and UPI scams in India. Attackers use courier lures, fake e-stores, and social engineering to steal money.