Finance.Biggo Meta Removes Malware Ads Masquerading as Pornography Apps
Article Content
- •Meta removed ads promoting malicious Android apps disguised as pornography.
- •India reported $2.4 billion in cyber-fraud losses in 2025, targeting digital payments.
- •Malicious apps could access sensitive user information and transfer funds without consent.
Meta has taken down numerous ads on Facebook and Instagram that promoted malicious Android applications disguised as pornography apps, following a warning from India's National Cyber Threat Analytics Unit (NCTAU). These ads, operating under names like 'Night Play' and 'Kyss', directed users to phishing sites and potentially harmful downloads. In 2025, India reported nearly $2.4 billion in cyber-fraud losses, with these scams targeting the country's growing digital payments sector. The malicious apps could access sensitive information, including one-time passwords and bank PINs, and could transfer funds without user consent. Despite the takedown, at least 39 ads were still active after the advisory was issued. Meta's policies prohibit ads containing adult content and deceptive practices, yet internal projections indicated that scam-related advertising could generate significant revenue. This incident marks the second recent confrontation between the Indian government and major tech platforms over financial fraud.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (8)
Following this threat?
Track Kyss in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
CISA Warns of Exploited Vulnerabilities in ProFTPD, ONLYOFFICE, Strapi, and More The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND. These vulnerabilities are being by Chinese actors for cyber espionage, targeting…