Attackers Mimic RTO Challan Notifications to Deliver Android Malware

Cybersecuritynews •Tushar Subhra Dutta • February 5, 2026

A sophisticated Android malware campaign targeting Indian users has emerged, disguising itself as legitimate Regional Transport Office (RTO) challan notifications. The malicious applications are distributed outside the Google Play Store, primarily through WhatsApp and similar messaging platforms, exploiting user trust in government services. Threat actors send fake traffic violation alerts to victims, instructing them to […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Android Malware Campaign Exploits Fake RTO Challan Notifications in India A new Android malware campaign has been identified in India, where attackers are impersonating Regional Transport Office (RTO) challan notifications to distribute malicious applications. These applications are primarily spread through messaging platforms like WhatsApp, targeting users by exploiting their trust in government services. 3 sources 34

Extracted Entities

Attackers Mimic RTO Challan Notifications to Deliver Android Malware

The full story

Extracted Entities

Attack Types (1)

Industries (1)

Platforms (3)