Shakti Avasthy
Shakti Avasthy

@ShaktiAvasthy

2 Tweets 29 reads Feb 27, 2022
Hi all, starting this thread to inform about emerging cyber fraud trends as and when I encouter them in daily affairs.
1. Video call from unknown number with naked person at other end and recording the video call, later blackmail and sextortion that receiver forced into nudity.
2. Online booking fraud of jungle safari, helicopter rides to religious shrines. Multiple websites of similar names exist and without clarity of domain addresses in such booking these frauds are taking place. Please see gov.in address while paying.
3. Post vaccine survey rewards where malicious links are being sent to gather information and get remote access to the mobile.
4. Merging the call scam: where users are called and parallely their WhatsApp account is tried to get logged in, to receive OTP fraudsters are clicking on "receive via call" and then asking the user to merge call for talking to senior executive.
5. Apps like BlueBugger are widely used as super Bluetooth hack devices in areas like restaurant, cafes, park where large gathering is expected and their Bluetooth might be turned on, these apps then install a backdoor in the device.
6. Voicemail email scam: where on clicking "Preview voicemail" redirects to phishing websites.
7. Fake customer care numbers available on internet, on calling them customer agent asks user to install apps like AnyDesk which gains remote access to the mobile and loss of data and easy access to OTP.
8. Fake popular fast food franchise (Dominos, McDonald's) apps and websites giving good discounts and delivery of food, turning out to be fraud.
9. Fake income tax filing website generally by name of imobile asking for data and then payment of self assessment tax luring taxpayers of their money.
10. Free Covid test scam: asking users for basic amount for tax purposes or enabling them to install Remote access apps to extract money.
11. Fake property owners listed on real estate property apps: who are asking for advance claiming themselves to be tenants.
12. E-Sim frauds: fraudsters calling for conversion into E-sim and sending QR code for its activation, when scanning the QR code it redirects to a malicious link.
13. Impersonating crypto experts by providing IDO (Initial Dex offering) and ICO (Initial Coin Offering): later linking to private crypto wallets where users putting their money.
14. Fake Army/CAPF officer ID cards on platforms like Olx: mentioning that they are in a transferrable job and using the army's nationalist credentials to gain legitimacy, asking for a token amount initially for a consumer good which would never be delivered.
15. Ads of newly launched E-Commerce websites on Instagram, Facebook with heavy discounts: a lot of them are fake, choose Cash on Delivery if unsure of their website credibility. Most fraudulent websites won't allow Cash on Delivery on their products.
16. Cyber frauds through Fake bonds/shares/securities: promising enormous returns in 4-5 years, fake bonds are being issued through cyber network, people are made to believe that since share market is giving good returns they are able to provide good returns through these bonds
17. Misusing 'Request Money' feature: fraudsters pretending to be buyers on online selling platforms, use the Request money feature in their apps which brings a link to customer phone, confusing Request with Receive, they click on the link and enter mPin which siphons off money.
18. Creating fake social media profiles & demanding emergency cash from relatives, friends: copying the original display picture, uploading similar photo albums, and adding mutual friends which confuse people and fraudsters then ask for loan for some emergency.
19. Juice Jacking: where when mobiles are connected to unverified mobile charging points which plants malware into the mobile enabling fraudsters to steal sensitive data from the phone. This later enables fraudulent transactions.
20. Scareware tactics like "Limited Time Offers", "Hurry, Hurry, Hurry": are often misused, playing upon the psychological aspects and offering abnormally high returns or exorbitant discounts, convincing customers that they are lucky to receive such discounts.
21. Unscrupulous loan apps offering instant and short-term loans without KYC, documentation, CIBIL Score, PAN number: they either dupe customers by asking for the token amount for processing the application and even if they are giving loan are charging very high-interest rates.
22. WhatsApp fake movie link scam through WhatsApp groups: fraudsters are adding users to WhatsApp groups and sharing free fake movie download links, on clicking them phone is getting hacked. Please change privacy setting where only your contacts can add you to any WhatsApp group
23. Fake KBC lucky winner WhatsApp voicenote: asking users that they only operate on WhatsApp and giving fake lottery numbers, then asking for details and clicking on fake links or scanning fake QR codes.

Loading suggestions...