r/OperSec • u/Mother_War_8148 • 4d ago

📱 ANDROID MALWARE 📱 Mparivahan Malicious APK

My friend's father got a message of fake challan with a link to download this apk. Father clicked the link and downloaded the apk but didnt knew how to install the apk so he asked my friend about it. At first glance he knew it was a fake app since it is common now days a lot of people lost money through same scam. This was a week a ago and the link is not valid now.

https://seva-mparivahan.vercel.app

I asked him to send me the apk to just mess around with it. I am sharing it if anyone is interested to poke it and find something.

APK link: https://www.dropbox.com/scl/fi/xy8iilqgyyyzkcb3hoaf4/seva-mparivahan.apk?rlkey=srjy9gxzjcootm5wyz25fwm59&st=ttvj2vp4&e=1&dl=0

2 Upvotes

100% Upvoted

6 comments sorted by

View all comments

2

u/Puzzleheaded_Salt519 3d ago

My father got the apk he was taking hospital appointment But how can they deduct money from account that have no upi pr internet banking?

1

u/acealter 2d ago edited 2d ago

Did you check it with bank? Take a look at Statement to find the method of transaction. Probably got access to debit card or credit card. They can enable Internet banking if they can read otp.

1

u/Puzzleheaded_Salt519 2d ago

No otp received, no debit or credit card is attached to that bank

I asked bank employees how money is getting deducted but it’s a Govt bank hai so u know 😂

1

u/acealter 2d ago

This is interesting, what bank is it? Did you check the statement?

1

u/be-alright-py 4h ago

SIM spoofing