APK (Android Package Kit) is software used to run applications on the Android operating system. APKs can usually be downloaded through the PlayStore application. However, some APKs can still harm the user's mobile device.
One of the risks of installing a malicious application is the theft of personal data used in online fraud mode. Recently it was reported that online fraudsters use several new modes, such as sending digital invitation messages and applications to track package receipt numbers via WA numbers in the form of APKs.
If the APK is clicked and installed on your device, it will allow the sender to steal your personal data, including your banking accounts data, such as username, password, pin, and OTP code. They will use these data to break into and drain your account balance until it runs out. One online media reported that the victim of this fraudulent online practice had lost an account balance of IDR 14 million due to clicking and installing an APK sent via a WhatsApp message.
Check out the explanation of the online fraud mode so you can avoid it.
Fraud Mode with Digital Invitations
The online scammer sends a message in the form of a digital invitation via WhatsApp. Unlike digital invitations, which include an invitation link containing wedding invitation details such as location and time of execution, digital invitations sent by online scammers are only sent in APK format.
The perpetrator tries to direct the victim to an application designed to access and steal the victim's personal data to break into the victim's account. Thus, unknowingly the victim's account balance will be stolen by online fraud perpetrators.
Fraud Mode with Receipt Check Messages
Apart from sending digital invitations, online theft perpetrators use another mode of sending messages to check the package receipt numbers of their target victims. Same with the digital invitation-sending mode, the victim will be asked to click and install an application in the form of an APK so that the perpetrator can steal personal data and break into the victim's account.
OJK calls the two modes of fraud sniffing. According to the OJK, sniffing is a wiretapping crime by hackers that is carried out using internet network tapping to steal important data and information such as m-banking usernames and passwords, credit data information, email passwords, and other important data.
Tips for Avoiding Dangerous Applications on Mobile
To avoid this fraud mode, you can pay attention to some of the following tips to prevent dangerous applications on mobile phones:
1. Ignore SMS or WhatsApp Messages from Numbers You Don't Recognize
If you get SMS messages, WhatsApp, or social media such as Facebook, Instagram, and Twitter that you don't recognize, it's better to ignore the message and don't click on the link or application sent. Online scammers often target unwary and panicked victims with the messages they send.
To prevent similar messages from being sent by the same social media numbers and accounts, you can take preventive steps by blocking these numbers and accounts and reporting these social media numbers or accounts.
2. Install Antivirus
Another step that you can apply to avoid dangerous applications on your cellphone is to install an antivirus. Currently, there are various antiviruses available in app stores (playstore) that you can use to prevent dangerous applications from being used as a mode of online fraud.
This antivirus can detect viruses and malware hidden on your cell phone and clean them quickly. However, several antiviruses cannot completely clean viruses and malware on your cellphone. So, you need to do a factory reset to clean it.
3. Use Authentication when Installing Applications
You can also activate dual authentication to avoid fraudulent mode with malicious applications. Double authentication can be helpful to prevent you from installing accidental applications. This authentication can be a PIN, pattern, or fingerprint. Authentication functions as a gatekeeper before the user installs the application. By activating authentication, you can minimize further steps before installing and entering a malicious application that can break into your account.
4. Get to know the character of the mobile device you are using
You also need to identify the mobile device you are using. Suppose you feel strange things on your device, such as hot temperatures when not in use, the battery draining quickly, and annoying ads appearing. In that case, you experience error problems when opening certain applications, and the antivirus detects harmful foreign files, it could indicate the presence of malware on your device. Your cellphone. One way you can do this is to do a factory reset, and you also need to change the application account password and account pin or mobile banking that you have.
5. Perform Regular Mobile Operating System Updates
Another anticipatory step you can apply is to update the mobile operating system you use routinely. Often cellphone users need to be more active in updating the operating system for various reasons, such as using large quotas and wasting time. In fact, updating the operating system regularly can improve the cybersecurity of our mobile devices. This is also because one of the operating systems updates functions to patch security holes in our mobile devices.
Beware of SMS Messages or Social Media Chats on behalf of Bank MAS
If you get an SMS message or social media chat on behalf of Bank MAS that asks you to click on a certain link or APK in the message, it's better to ignore it. Bank MAS only sends messages via the verified WA number and official Bank MAS social media account.
If you get a suspicious message on behalf of Bank MAS, you can report it and contact Bank MAS customer care as follows:
Call center: 1500011
Email: care@bankmas.co.id
Social media:
-
Instagram: @bankmas_id
-
Facebook: Bank MAS
-
Linkedin: PT Bank Multiarta Sentosa Tbk (Bank MAS)
Source: OJK