Himachal Pradesh Cyber Police have issued a warning advising residents to be cautious of messages from unknown numbers, especially those containing attachments.
As the wedding season peaks, many people are receiving invitations via WhatsApp, a convenient and cost-effective method compared to traditional paper cards. However, this growing trend has caught the attention of cybercriminals who are exploiting it to launch a new type of scam. A harmless-looking wedding invitation sent to your phone could be the gateway to a serious cyber attack that could compromise your entire phone and personal data.
According to officials from Himachal Pradesh Police, scammers are now sending malicious wedding invitations through WhatsApp in the form of APK files. When unsuspecting recipients download these files, their phones are infected with malware that allows cybercriminals to gain full access to their devices. Once the malware is active, hackers can send messages from the infected phone, steal personal data, and even extort money without the owner’s knowledge.
How the Scam Works
The scam typically begins with a WhatsApp message from an unknown number, claiming to be a wedding invitation. The message includes a file attachment that appears legitimate but is actually a harmful APK file. Once the recipient downloads the file, an application is secretly installed on the phone. This malicious app can access sensitive data, monitor activities, and even hijack the phone’s functions.
In some cases, cybercriminals can use the compromised device to send fraudulent messages to the victim’s contacts, requesting money or sensitive information, all while pretending to be the phone’s owner. This sophisticated attack can lead to significant financial losses and personal harm.
Cybersecurity Experts Warn: Don’t Download Suspicious Files
Himachal Pradesh Cyber Police have issued a warning advising residents to be cautious of messages from unknown numbers, especially those containing attachments. Any file sent from unfamiliar sources should not be downloaded, particularly APK files, which are commonly used to distribute harmful applications.
DIG Mohit Chawla, Himachal Pradesh State CID and Cyber Crime Department, stressed the importance of vigilance, stating, “If you receive an unsolicited wedding invitation or any file from an unknown number, do not click on it. Ensure you verify the sender and the file before downloading anything onto your phone.”
He added that while downloading files from trusted contacts is generally safe, it’s still important to confirm the legitimacy of the file, especially if it seems out of context or unexpected.