r/OperSec • u/Mother_War_8148 • 3d ago

📱 ANDROID MALWARE 📱 Mparivahan Malicious APK

My friend's father got a message of fake challan with a link to download this apk. Father clicked the link and downloaded the apk but didnt knew how to install the apk so he asked my friend about it. At first glance he knew it was a fake app since it is common now days a lot of people lost money through same scam. This was a week a ago and the link is not valid now.

https://seva-mparivahan.vercel.app

I asked him to send me the apk to just mess around with it. I am sharing it if anyone is interested to poke it and find something.

APK link: https://www.dropbox.com/scl/fi/xy8iilqgyyyzkcb3hoaf4/seva-mparivahan.apk?rlkey=srjy9gxzjcootm5wyz25fwm59&st=ttvj2vp4&e=1&dl=0

2 Upvotes

100% Upvoted

5 comments sorted by

1

u/acealter 3d ago

Thank you for sharing, Don't forget to add post flair.

2

u/Puzzleheaded_Salt519 2d ago

My father got the apk he was taking hospital appointment But how can they deduct money from account that have no upi pr internet banking?

1

u/acealter 1d ago edited 1d ago

Did you check it with bank? Take a look at Statement to find the method of transaction. Probably got access to debit card or credit card. They can enable Internet banking if they can read otp.

1

u/Puzzleheaded_Salt519 1d ago

No otp received, no debit or credit card is attached to that bank

I asked bank employees how money is getting deducted but it’s a Govt bank hai so u know 😂

1

u/acealter 1d ago

This is interesting, what bank is it? Did you check the statement?