Explained | What is Digital Invitation Scam and here's how to safeguard yourself from such cyber threats

Cyber criminals have come up with Digital Invitation card with malware. They are being shared on messenger apps to steal potential victim's bank account.

In the last several years, particularly since the COVID-19-induced pandemic, smartphones have become indispensable for people around the world. It offers several conveniences such as instantly ordering food, hailing a cab, working on an office presentation using productivity tools, transferring money with just a few taps on the screen and many more.

However, if one is not careful enough, one may end up paying dearly. Lately, there has been a surge in cyber crimes around the world, including India, particularly in the urban regions like Bengaluru, Delhi, Mumbai and other cities.

Recently, a Bengaluru-based businessman fell victim to a 'Digital Invitation' scam.

What is Digital Invitation scam?

It is a kind of malware-based phishing technique, wherein the cyber criminals use messenger applications such as WhatsApp and Telegram. They randomly send Malware-laced APK (Android Package Kit) with titles such as Wedding Invitation or House Warming Ceremony, or Weekend Party at home.

The unsuspecting victim with an Android phone downloads and installs as per the on-screen instructions. And, once installed, it gets hidden with all the apps already installed on the phone. It is very difficult to detect them as sometimes, they mimic popular utility tools and never perform any function.

Without reading conditions, some users give permission for the malware-laced app to get access to call logs, message apps and other important applications. Once the permission is granted, it secretly monitors and read all the messages, emails and calls received on the phone. Also, they are capable of recording the screen when using the banking or UPI apps. This potentially hands the cyber criminals to get full details of the user's bank ID and password, and it already has access to the messages app.

And, before they could realise what hit them, the threat actors would have already siphoned off their bank account.

This is exactly what happened to a Bengaluru-based enterprise owner, who unknowingly installed a malicious Wedding Invitation APK file received on WhatsApp. He apparently lost close to five lakhs.

Here are tips on how to safeguard yourself from such Digital Invitation scams on messenger apps:

1) If you ever receive messages with URL links to third-party app stores or APK files, ignore them. Never install an APK file shared on WhatsApp or any messenger or social media platform. For 99 per cent of the time, they are risky and potentially come with malware-laced files

2) Always install and download apps from the official Google Play, Microsoft Windows Store, and Apple App Store only

3) Even if you are downloading from official websites or aforementioned platforms, make it a habit of reading the reviews of the app. The feedback shared by genuine users will let you know if the app is trustworthy or not.

4) Ensure the device is fully updated to the latest version of the operating system. Smartphone, tablet and computer makers regularly send security patches along with OS updates to protect your device from such cyber threats

5) Also, to be on the safe side, install anti-virus apps by renowned publishers such as Kaspersky, ESET and others.

In India, if you fall victim to online fraud, immediately call toll-free 1930. It is run by the Indian Cyber Crime Coordination Centre, and once you share the bank transaction details, they will be able to trace and freeze the mule bank accounts. Ensure you call them within one hour, as there will be a higher chance of blocking the cyber criminals from withdrawing the ill-got money.

Get the latest news on new launches, gadget reviews, apps, cybersecurity, and more on personal technology only on DH Tech.