The Federal Bureau of Investigation has released an announcement stating that cybercriminals are using mobile-beta testing applications to target victims for malicious purposes. These apps are often distributed through phishing or romance scams.
These applications are capable of stealing personally identifiable information, financial account access, or device takeovers. The mobile-beta testing application resides inside a mobile-beta testing application environment.
Cybercriminals communicate with the victims luring them to test these mobile applications as they promise large incentives and financial payouts. Most of these applications are cryptocurrency exchanges that enable the theft of personal data and money.
Victims are contacted by dating and networking apps directing them to download these malicious applications. Lack of awareness among some victims leads to providing their original account details in those cryptocurrency investment apps.
Victims believe that their money is invested in cryptocurrency, but instead, the application extracts money from the victim as the applications lure for fake investments, as stated by the FBI.
Red Flag Indicators
Identifying malicious applications can be accomplished by paying attention to key warning signs, such as abnormal depletion of mobile battery life, the appearance of unauthorized apps that the user did not install, recurring ad pop-ups, and apps with a high number of downloads but very few reviews.
These indicators may suggest that the app is up to no good and could pose a security threat to the user’s device and personal information.
Recommendations
To prevent this kind of malicious applications, always
- Check for the legitimacy of the developer of the application before downloading the app.
- Do not download applications from any third-party websites
- Do not provide any personal information through email or message
- Do not respond to unsolicited emails including links
- Be aware of emails that shows a sense of urgency or threats as they are potentially phishing emails
- Restrict unwanted app permissions and uninstall applications that are no longer used.
- Do not click on any URLs from unsolicited emails
- Never open any attachments from senders that you may not know
Users should take up any cybersecurity awareness training and be aware of these kinds of emails to prevent threat actors.
Keep informed about the latest Cyber Security News by following us on GoogleNews, Linkedin, Twitter, and Facebook.