Mumbai East Region Cyber Police have arrested three men allegedly involved in supplying malicious Android application files to cybercriminal gangs operating across India. The APK files, disguised as RTO challans and electricity bill payment applications, were used to obtain victims’ banking information and debit card details. The arrests followed an investigation into a cyber fraud case involving Rs 27 lakh.
How Was the Gang Exposed?
The network came under investigation after a shopkeeper reported losing money through a fraudulent application presented as a Mahanagar Gas bill update.
Police identified the arrested accused as Mohammed Arif Ansari, 28, Sheikh Bilal, 28, and Mehboob Alam, 26. Investigators suspect the three supplied malicious applications to criminal groups involved in financial fraud across multiple states.
How Did the Victim Lose Money?
The complainant, N Thakkar, a resident of Ghatkopar, received WhatsApp messages between April 16 and 18 warning that his gas connection would be disconnected unless his previous month’s bill was updated.
He was allegedly instructed to download an application named Mahanagar Gas Bill Update Online.apk and enter his debit card information. Believing the communication, he followed the instructions and subsequently lost Rs 26.12 lakh.
https://the420.in/fcrf-certified-chief-ai-officer-second-cohort-november-2026/
Who Supplied the Malicious Applications?
During questioning, the arrested men allegedly identified Sajid Mansur Ali, 29, from Kapashera in southwest Delhi, as a supplier of APK files and mobile numbers belonging to potential targets.
Police said the applications and contact details were allegedly distributed through WhatsApp. Investigators are examining the suspected supply network and its connections with other cybercrime cases.
How Much Did the Accused Charge?
According to investigators, the arrested suspects allegedly forwarded malicious applications to criminal groups for payments ranging between Rs 8,000 and Rs 10,000 per file.
Police are also investigating two men from Jharkhand suspected of procuring the applications. The accused identified them as Mohan Kasool Mahto and Sunil Dashrat Soren.
Which States Are Linked to the Network?
Police said the three arrested suspects have connections with other cases registered in Jharkhand, West Bengal, Uttarakhand and Maharashtra. Investigators are examining how the applications were distributed among criminal groups and used to target bank customers.
The420 Insight: What Does This Case Reveal?
The case highlights how malicious APK files can turn routine payment reminders into financial fraud.
Applications disguised as utility bill updates or traffic challans can be used to steal sensitive banking information, intercept OTPs and facilitate unauthorised transactions. The investigation also points to a wider network allegedly supplying such applications to different criminal groups.
