Fake COVID vaccine registration App
Original Issue
Date: May 08, 2021
1. It has been reported that, a fake SMS message is in circulation that falsely claims to offer an app to let users register for COVID-19 vaccine in India.
2. The SMS message carries a link that installs the malicious app on android based devices, which essentially spreads itself via SMS to victims’ contacts. The app also gains unnecessary permissions that attackers could leverage to acquire user data such as contact list.
3. The malicious android app is under circulation with different names such as:
- Covid-19.apk
- Vaci__Regis.apk
- MyVaccin_v2.apk
- Cov-Regis.apk
- Vccin-Apply.apk
SNAPSHOT OF MALICIOUS APP LISTING
Best Practices and Recommendations
1. Always use official CoWIN portal https://www.cowin.gov.in for COVID vaccine registration.
2. Beware about phishing and fake domains, emails, text messages and phone calls which falsely claim covid vaccine registrations.
3. Check the integrity and legitimacy of URLs before providing login credentials or clicking a link. In settings, do not enable installation of apps from “Untrusted Sources”.
4. Beware about downloading, opening a file or document received over various channels like SMS, email.
5. Do not submit personal and financial information to unknown and unfamiliar websites and apps.
6. Consider using Safe Browsing tools, filtering tools (antivirus and content-based filtering) in your antivirus, firewall, and filtering services.
Disclaimer
The information provided herein is on “as is” basis, without warranty of any kind.SNAP