Follow us on Google News
A retired Army Colonel in Noida has fallen victim to an advanced cyber fraud involving a malicious APK file and SIM cloning. The fraudsters managed to siphon off ₹28.87 lakh from his bank accounts through 13 unauthorised transactions — including 7 IMPS transfers — without any OTP reaching his phone. The case is now under investigation by the Cyber Cell.
https://the420.in/centre-for-police-technology-launched-as-common-platform-for-police-oems-and-vendors-to-drive-smart-policing/
Fraudster Posed as IGL Officer, Sent APK File on WhatsApp
According to the complaint, Colonel (retd.) Gopal Canal, a resident of Sector-28, received a call on November 7 from a man identifying himself as an official of Indraprastha Gas Limited (IGL). The caller informed him about the renewal of his gas connection and sent an APK file on WhatsApp, asking him to open and install it to complete the process.
Unaware of the trap, the victim clicked the file. For the next two days — November 7 to 9 — there were no suspicious messages, calls, or activities, giving the false impression that nothing was amiss.
November 10: Continuous Transaction Alerts Shock the Victim
On November 10, Canal’s phone suddenly received 13 back-to-back bank transaction alerts, including 7 IMPS transfers, despite the fact that IMPS transactions require OTP verification.
Shockingly, he had not received any OTP or verification messages for these transfers.
Fraudsters even used his credit card and exhausted the available limit. By the time the victim realised the breach, a total of ₹28.87 lakh had been fraudulently withdrawn.
How the Hack Happened: APK Malware + SIM Cloning
Cyber experts analysing the case explained that the APK file sent via WhatsApp contained malicious spyware, which allowed hackers to take control of the victim’s device.
What happened after the APK was installed:
- Fraudsters gained administrative access to the phone.
- They cloned the SIM linked to the victim’s bank accounts.
- All SMS alerts and OTPs were redirected to the fraudsters’ device.
- Messages meant for the victim never appeared on his phone.
- The hackers acquired full control of internet banking, credit cards, and linked services.
This method allowed the criminals to bypass every OTP-based authentication layer typically used for financial transactions.
Even After Card Limits Exhausted, Fraudsters Continued Transactions
Investigators noted that the fraudsters not only drained the limits of the credit and debit cards but continued to attempt transactions thereafter. This indicates a deep breach of the victim’s mobile network and banking-linked communication channels.
Complaint Filed; Cyber Cell Freezes Accounts
Upon realising the fraud, the victim immediately alerted his bank as well as the Cyber Cell. The accounts were temporarily frozen to prevent further losses. A formal FIR has been registered under relevant sections of the IPC and the IT Act. The investigation is underway to trace the perpetrators and the servers used for the attack.
Experts Issue Warning: Avoid All APK Files Sent Over WhatsApp
Cybersecurity experts have issued the following advisories:
- Never install APK files received on WhatsApp, especially from unknown sources.
- No government agency or utility service asks users to download APKs for verification.
- If SMS alerts suddenly stop or the phone loses network randomly, it may indicate SIM cloning.
- Activate biometric locks on all banking apps and change passwords regularly.
- Immediately contact the telecom operator if the SIM appears to be deactivated without reason.
Police Alert Citizens About Rising SIM-Cloning Frauds
Noida Cyber Cell has warned residents about a surge in malware-based SIM cloning cases and urged people to avoid downloading unofficial apps. The investigation continues as teams examine digital footprints and the routing of messages.
