Beware: Mobile Malware Targets Indian Bank Users with Sneaky OTP Theft Tactics
Mobile devices are the latest playground for cybercriminals, with Indian bank users caught in a mobile malware campaign. Using over 1,000 fake Android apps, these banking trojans are as sneaky as a cat burglar in slippers, intercepting OTPs and swiping sensitive info faster than you can say “What’s my PIN again?”

Hot Take:
India’s mobile banking customers have just entered a new season of “Who Wants to Be a Millionaire… Victim?” The latest episode features a villainous threat actor with an affinity for Android devices and a knack for swiping OTPs faster than you can say “Aadhaar.” It’s a drama-filled plot with a ‘WhatsApp Admin’ twist and enough stolen data to make even the most hardened cybercriminal say, “Whoa, that’s a lot of bytes!”
Key Points:
- Banking trojans targeting Indian users via Android devices, primarily through WhatsApp.
- Over 1,000 malicious apps disguised as legitimate tools, intercepting OTPs via live phone numbers.
- Majority of victims located in West Bengal, Bihar, and Jharkhand.
- Malware variants include SMS Forwarding, Firebase-Exfiltration, and Hybrid approaches.
- Avoid APK files from untrusted sources to stay safe from mobile malware.
Already a member? Log in here