Fake oximeter apps stealing your data

Cybersecurity experts and law enforcement agencies have warned against fake oximeter apps that may steal personal data from smartphones. These dubious apps claim to track vital Covid parameters, like pulse and blood oxygen level. But experts warn that these apps are stealing personal data and information.

Cybercriminals in past have written various malicious code and phishing attack around the curiosity and search volume related to Covid-19. Investigators now suspect that hackers have adopted new modus operandi by making malicious oximeter apps.

Cops have observed several WhatsApp message asking to download an app from the Google Playstore that can check your blood oxygen level using your mobile’s rear camera. The apps also ask for biometric fingerprints, photographs and seek permission to access contacts and other key details on the phone.

Oximeter apps check the level of oxygen present in the blood of the users and keep track of their heartbeats. More specifically, these apps help in monitoring the percentage of breathable oxygen depending on the user’s altitude.

Ludhiana commissioner of police Rakesh Agarwal said no one has been duped to far but two such cases have come to his notice in which people received a notification about downloading a mobile application that works as an oximeter.

“These dubious apps claim to measure blood oxygen saturation (SpO2) levels. However, such apps are not showing accurate results and are not recommended by doctors. The readings are mostly wrong so the makers are definitely using vital details to steal information,” said a senior police officer.

Last week, the cybersecurity handle of the Ministry of Home Affairs, Government of India, on Twitter had warned users not to install fake oximeter mobile apps from any links they may have received over email, SMS or social media. “… these apps may steal your personal or biometric data from your mobile phone,” it said in the tweet.