It was claimed that money was stolen from bank cards by directly interfering with smartphones.
Oku.Az claims it was shared on social media. Citizens complain that their smartphone suddenly turns off and they cannot restart it in any way, and after taking it to the service center and getting it repaired, they witness the funds from their bank account being completely withdrawn.
The author of one of the actions, IT specialist Farid Pardashunas, noted that the case in question is a direct intrusion into the smartphone, which, according to the initial probability, is carried out through external applications – “apk” files.
We have sent a request to the Electronic Security Service (ETX) on the issue.
Oku.AzIn response to a request from the agency, it was reported that when citizens download programs from unknown sources on their mobile phones, cybercriminals use social engineering to send them RAT programs:
“RAT (Remote Access Trojan) is a malicious program designed to remotely control a device. Once downloaded to a mobile phone and with certain permissions, it cannot be removed, not even antivirus programs can block it.
Additionally, these applications are in the “apk” format (with the file extension name Android Package, a file format used by Android-based operating systems for the distribution and installation of mobile applications, mobile games, and middleware). Once installed on the mobile phone, the cybercriminal has every possibility to perform any operation on the mobile phone.
In this case, cyber fraudsters can control other accounts such as “m10”, banking applications and cryptocurrencies. They mainly target Android mobile phones, taking into account the large number of Android users as well as the relatively lower security of this system compared to the iOS system.
ETX emphasized that to prevent such situations from happening, one should not download applications from unknown sources (such as WhatsApp+, “cTOST” and other applications) to the mobile phone:
“In addition, it is recommended to definitely check the permissions granted to the downloaded programs. If a malicious program is downloaded, it is considered advisable to transfer the necessary data to another device.”
Aytaj Gasimova
