Retro photo craze exploited to spread APK links, risking mobile banking data

Retro photos that recreate old memories are trending heavily on social media, with growing interest in getting photos of oneself or family made in an 80s look. But cyber fraudsters have exploited this trend to devise a new method of fraud, sending fake links to users via WhatsApp and SMS under the pretext of creating retro-style photos, according to a warning issued.

As soon as users click on the link, they are asked to download some editing or AI app to prepare the photo. In many cases, they are pushed to download an APK file for this purpose. Downloading an APK file from an unknown website and installing the app can pose a major threat to mobile security.

As soon as this fake app is installed on the mobile, it starts asking for permissions to access SMS, notifications, contacts, device information and other sensitive data. If the user grants these permissions, the risk increases of OTPs or banking-related information falling into the wrong hands. Users are therefore advised not to grant excessive permissions to an unknown app just to get a good photo made.

The risk from this fraud is not limited to mobile or banking information alone. There is also a possibility of the high-quality facial photos obtained from users being misused. Such photos could be used to create fake social media profiles or deepfakes. It is therefore necessary to check the credibility of any unknown app or website before uploading one's photo to it.

To avoid such cyber fraud, users should not click on links for unknown photo-editing or AI apps received on WhatsApp or SMS. They should not download APK files from unknown websites. Before installing any AI or photo-editing app, its developer, reviews and the permissions it is seeking should be checked. If an app asks for excessive permissions, installing it should be avoided. If a suspicious app has already been installed, it should be uninstalled immediately. Bank account transactions and other important accounts should also be monitored after using such an app.

If someone falls victim to cyber fraud, they should contact the cyber crime helpline at 1930 without delay. A complaint can also be filed on the cybercrime.gov.in portal. However attractive the retro photo trend may seem, it is necessary to stay alert to unknown links, APK files and suspicious apps. Protecting one's digital security matters more than following a trend.