fraudulent activities

AppWizard
December 24, 2024
The Ministry of Digital Development, Communications and Mass Media, along with Roskomnadzor, is considering imposing restrictions on voice calls made through messaging applications due to a rise in fraudulent activities. Two scenarios being evaluated include blocking voice traffic from abroad and a complete ban on voice calls within these apps. Roskomnadzor has acknowledged its authority to restrict such calls if they violate Russian law but the Ministry has stated it is not currently drafting regulations for this purpose. Fraudulent calls via messaging apps have surged to about 40% of total traffic, up from 1% three years ago. MegaFon, Russia's second-largest mobile operator, has stated it lacks the technical capabilities to analyze calls from these apps and suggests that additional software on users' smartphones is the only effective way to mitigate fraudulent calls.
AppWizard
September 29, 2024
Cybersecurity experts have identified a new variant of the Octo Android malware, named Octo 2, which targets Android users by disguising itself as trusted applications like Google Chrome. This malware is designed for fraudulent activities, specifically targeting bank accounts and sensitive information. Discovered by the Amsterdam-based firm ThreatFabric, Octo 2 is spreading across Europe and features advanced mechanisms that make it harder to detect. Its capabilities include remotely locking and muting the device's screen, launching applications without user consent, sending malware-laden messages to contacts, and intercepting SMS messages to capture verification codes, posing a significant risk for unauthorized access to secure accounts.
AppWizard
September 25, 2024
A new version of the Necro malware loader has infected approximately 11 million Android devices through Google Play by using malicious SDKs in legitimate applications. It was found in two apps: Wuta Camera, which had over 10 million downloads and was compromised in versions 6.3.2.148 to 6.3.6.148, and Max Browser, with 1 million downloads, which still harbors the malware in version 1.2.0. Both apps were compromised via an advertising SDK named 'Coral SDK' that used obfuscation and image steganography. The Necro Trojan also spreads through modified versions of popular apps available on unofficial websites, including WhatsApp mods and Spotify Plus, and is known to display ads, install applications without consent, and engage in fraudulent activities.
AppWizard
September 24, 2024
Cybersecurity researchers have discovered a breach in the Google Play app store linked to a compromised software development kit (SDK) called Coral SDK, which has allowed malware named Necro to infiltrate at least 11 million devices. The malware uses steganography techniques to deploy additional malicious activities, including loading ads through invisible WebView windows, downloading and executing arbitrary JavaScript files, facilitating fraudulent activities, and rerouting malicious traffic. Affected applications include GBWhatsApp, FMWhatsApp, Spotify Plus, Minecraft, and Stumble Guys. Users are advised to be cautious when downloading apps and to consider download counts, user ratings, and reviews.
AppWizard
September 18, 2024
Businesses are increasingly integrating artificial intelligence (AI) to streamline operations and enhance customer experiences. AI applications include automating routine tasks, providing personalized customer service, analyzing purchasing patterns, predicting trends, optimizing inventory management, detecting fraud, and assessing credit risks. Companies are using chatbots and virtual assistants for instant customer support and creating personalized marketing campaigns based on customer data. As AI adoption grows, businesses must address ethical implications, ensure data privacy, and invest in workforce training to adapt to new technologies.
AppWizard
September 17, 2024
Consumer advocacy group Which? has raised concerns about a deceptive website called Alltainment that uses misleading advertisements and QR codes to lure individuals into signing up for unrelated subscription services. One individual reported being directed to Alltainment while trying to register for a parking app, resulting in an unintended £39.99 monthly subscription. Just Park confirmed it is not affiliated with Alltainment and urged customers to report the scam. Reviews on Trustpilot indicate that many victims were redirected to Alltainment while trying to download legitimate parking apps. The Alltainment website was launched in November 2022, and negative reviews began appearing on Trustpilot from June 30, 2023. Nearly all reviews for Alltainment are rated one star, with primary complaints involving redirection from parking apps and QR codes. JustPark emphasized its commitment to customer safety and using only official channels for transactions. Customers seeking the official JustPark app are advised to access it through recognized platforms.
AppWizard
August 29, 2024
On August 29, France charged Telegram's CEO, Pavel Durov, with serious violations including facilitating the distribution of child pornography, enabling drug trafficking, and engaging in fraudulent activities. Durov was arrested on August 24 at Le Bourget airport and released after four days under the condition that he remain in France and report to police bi-weekly. He faces allegations of complicity in managing an online platform for illicit transactions by an organized group. Telegram has stated that the claims are "absurd" and that Durov has "nothing to hide." Additionally, Durov is under investigation for alleged serious acts of violence towards one of his children during a visit to Paris.
AppWizard
July 31, 2024
A malicious campaign targeting SMS messages through harmful Android applications has been active since at least February 2022, involving over 107,000 unique malware samples designed to intercept one-time passwords (OTPs) for identity fraud. A report from Zimperium indicates that 99,000 of these malware apps were previously unknown and not found in common repositories. The campaign affects victims in 113 countries, with India and Russia being the most impacted. The malware is installed via deceptive ads or Telegram bots and monitors incoming SMS messages for OTPs. The perpetrators remain unidentified but accept various payment methods, including cryptocurrency, for a service called Fast SMS, which allows access to virtual phone numbers for fraudulent activities. Additionally, Positive Technologies has identified SMS stealers targeting Android users in specific countries, and other malware variants use Telegram as command-and-control servers.
Search