SBI, Yes Bank, Bank of Baroda credit card users are at risk of cyber fraud: Details inside
If you often use mobile banking and are customers of any of the following banks then you are at risk of cyber fraud. An IT security firm in its report has claimed that the fake apps of State Bank of India, ICICI Bank, Axis Bank, Bank of Baroda (BoB), Yes Bank, Indian Overseas Bank (IOB) and Citi Bank are available on Google Play. The report further claimed that the fake apps have stolen data of many bank customers.
The report said that the fake apps have similar logos which makes it more difficult to diffrentiate between the two.
Meanwhile, according to a PTI report, some of the banks mentioned in the report said they have not come across any such fake apps.
However, some of the banks have started an inquiry and also informed the CERT-In -- the national nodal agency for responding to computer security incident.
Another lender Yes Bank said it has informed the bank's cyber fraud department about the matter.
However, the country's largest lender State Bank of India's response was awaited.
There were no immediate comments from ICICI Bank and Axis Bank.
According to the report, the apps lured victims to download and use them, either by masquerading as Internet apps or e-wallets, promising rewards, including cash back on purchases, free mobile data or interest-free loans.
Some even claimed to be providing a too-good-to-be-true service, enabling users to withdraw cash from an ATM and have it delivered to their doorstep.
"Deceptive malware may have stolen thousands of Indian sub-continent bank customers account data or credit card numbers," said Pankaj Kohli, threat researcher, SophosLabs.
Fake apps are not new to Android and this sort of malware will continue to find its way into the Android app store, it said.
"Some are blatant copies of real apps, while a few are much more dangerous as they seed malware and steal data from user accounts.
Users should always use antivirus software, which provides malware protection and internet security to keep users protected and stop these fake apps from stealing data," it said.