Cybercriminals in Himachal Pradesh have devised a new tactic to exploit the wedding season by sending fake digital wedding cards through WhatsApp, embedding malicious APK files within them.
These files, when downloaded, install malware that gives hackers access to users’ smartphones, allowing them to steal sensitive data, including bank details and potentially access user accounts. The cyber police are receiving increasing reports of such incidents, with cases emerging from Himachal cities Shimla, Dharamshala and Hamirpur.
The police have issued an advisory urging the public to avoid downloading files from unknown numbers, especially those disguised as wedding invitations. Additional Superintendent of Police Narveer Singh Rathore emphasised verifying the source before opening digital cards as fraudsters are using these tactics to access personal data and misuse accounts.
The scam begins with a wedding card sent from an unknown number. Hidden within the message is an APK file, which, once downloaded, installs an app on the user’s phone. This app grants hackers full control, enabling them to retrieve the user’s contact list, banking details, and other sensitive data. In some cases, hackers have used the victim’s phone to send fake messages to contacts, asking for money on the user’s behalf.
The cyber police have advised users not to download any wedding card or unfamiliar file from unknown sources to prevent unauthorized access.
