Fake COVID-19 vaccination registration apps are stealing users’ private information
The Indian Computer Emergency Response Team (CERT-In) has warned users about the fake apps masquerading as CoWin.
HIGHLIGHTS
- The CERT-in has alerted users about the fake CoWin apps that are sneaking into the phones of users.
- The SMS that is doing the rounds claims to provide apps to users to get themselves registered for the COVID-19 vaccine.
- Such files are being sent with the intention to steal passwords and other sensitive information of users.
If you are planning to book COVID-19 vaccination slot, you will have to be careful of the fake vaccine registration apps that are readily available. The Indian Computer Emergency Response Team (CERT-In) has warned users about the fake apps masquerading as CoWin, which is the official platform for booking COVID vaccination slots or registering for the vaccine. The CERT has reported that the apps are being circulated through viral SMSes.
The CERT-in has alerted users about the fake CoWin apps that are sneaking into the phones of users and gaining illegal access to the sensitive information of users. The SMS that is doing the rounds claims to provide apps to users to get themselves registered for the COVID-19 vaccine. It has been reported that the language of the SMS changes from time to time but it carries one of the five APK links that the CERT-IN has warned users about. Following are some of the APK files that are being circulated- Covid-19.apk, vaci_regis.apk, myvaccine_v2.apk, cov-regis.apk, vccin-apply.apk.
“The SMS carries a link that installs the malicious app on Android-based devices, which essentially spreads itself via SMS to victims’ contacts. The app also gains unnecessary permissions that attackers could leverage to acquire user data such as contact list,” CERT-in said in its advisory.
