Beware! Fake SBI Reward APK Attacking Users to Deliver Android Malware

A recent phishing campaign has targeted customers of SBI Bank through a deceptive message circulating in WhatsApp groups.

The message falsely claims that the recipient’s SBI reward points, amounting to Rs 9,980, will expire unless they download a purported “SBI BANK REWARD App.”

This app is represented as an Android APK file, prompting users to deposit cash into their accounts to claim the reward.

Cybersecurity analysis indicates that this campaign is a sophisticated attempt to harvest sensitive user data.

Investigate Real-World Malicious Links & Phishing Attacks With Threat Intelligence Lookup - Try for Free

Static and Dynamic Analysis

The analysis of the Android APK named SBl REWARDZ POINT 1.apk revealed several concerning findings through both static and dynamic examination.

One of the primary issues identified was the request for extensive permissions that are often associated with malicious applications, such as access to SMS, contacts, and ...