'SBI Rewards' malware scam targets WhatsApp groups
Source: Chronicle News Service

Imphal, April 24 2025: A new scam targeting WhatsApp users has recently surfaced on social media, with victims unknowingly spreading a malicious application disguised as a State Bank of India (SBI) Rewards app.

The fraudulent messages general appear in WhatsApp groups and often originate from a member whose account has already been compromised.

The affected user profile is modified to resemble an official SBI account, complete with the bank's logo and a matching username.

The message, written in poor English, urges recipients to redeem expiring reward points worth Rs 10,000 by installing an app named "SBI REWARDS POINT.APK or SBI REWARDS POINT 1.APK" .

The app, once installed, grants attackers access to sensitive data.

When The People's Chronicle analysed the application via Virus Total, it was found to be riddled with malware, bots, and trojans.

The software is flagged as Potentially Unwanted Program (PUP), Banking Trojan, and Trojan-Dropper, among other threats.

It also matches multiple malware signatures including members of the Android Agent family known for remote access and keystroke logging.

Heavily obfuscated and rated 99 out of 100 for malicious behaviour, the APK reportedly attempts to steal banking credentials, intercept OTPs, and install additional malware and possible SIM swapping.

Cybersecurity experts note that its riskware classification and data-harvesting patterns are consistent with previous cases of financial fraud involving fake reward apps.

One victim, a resident of Imphal who requested anonymity, said he installed the app after receiving the message from a trusted friend's number, who he later discovered to have already been hacked.

He found his bank account emptied shortly after installation.

"I thought it was legitimate.

It looked real.

I lost everything," he said, urging caution among other members in the group.

The case highlights a growing trend of cybercriminals exploiting trust within private messaging groups to perpetrate financial fraud.

Comment