Govt warns Android users of malware via Instagram, Facebook ads

Govt warns Android users of new malware via Instagram, ads. Malicious apps disguised as adult content can install VPNs, exposing data, risking financial fraud.

The government has warned Android users a new malware threat being pushed through Instagram and ads, with malicious apps disguised as porn or adult-content applications.

According to the National Cyber Threat Analytics Unit (NCTAU), some of these apps can install a VPN on the victim's phone. This can allow attackers to route the device's internet traffic through servers under their control, potentially exposing data being transmitted from the phone.

The warning goes beyond the usual risk of downloading a fake app. Once installed and given the required permissions, such malware can potentially gain extensive control over an Android device and put personal and financial information at risk, Moneycontrol reported.

Also read: Before Zomato became a food-tech giant, it advertised on porn sites for Rs 1.98 a click

After installation, the malicious app may request permissions that allow it to access sensitive parts of the device. In the cases flagged by NCTAU, installing a VPN is particularly concerning because it can give an attacker a route through which the phone's internet traffic is monitored or redirected.

This could expose information being transmitted from the device and potentially allow the connection to be misused for criminal activity.

Financial fraud is another concern

The government warning also highlights the possibility of financial fraud. Malicious Android applications can be used to access sensitive information, intercept communications or facilitate unauthorised transactions.

The risk becomes greater when users grant an unfamiliar application broad permissions simply to access the content it promises.

What Android users should do

They should also avoid granting unnecessary permissions and keep Android and security software updated.

If they have already installed a suspicious application, users should remove it and check their device for unusual activity. Anyone who notices unauthorised financial transactions should immediately their bank and report the incident to India's cybercrime helpline, 1930.

The warning reminds us that the biggest risk might be something other than the advertised content. It is the app that persuades users to install it to access the content.