High alert: Hyderabad cybercrime warns public against phishing links disguised as Indo-Pak news

Hyderabad: In light of recent Indian-Pakistan tensions, the Hyderabad Cyber Crime Wing has issued a public advisory warning citizens about a surge in cyber-attacks. State-sponsored hacking groups are actively targeting Indian government agencies, military personnel, and critical infrastructure through phishing campaigns and malware.

According to the advisory, attackers are exploiting public interest in the conflict by spreading deceptive content through WhatsApp, email, and social media platforms. These include malicious videos, images, APK files, and phishing links disguised as news updates or exclusive footage related to the ongoing situation.

The malware is often embedded in content shared under titles like “Dance of the Hillary”, “Army_Job_Application_Form.pdf”, and executable files like “tasksche.exe”. These files, once opened or installed, can compromise devices, steal personal data, or even lock users out through ransomware.

Attackers also circulate Android Package (APK) files claiming to offer live updates or tools. Once installed, these apps can access sensitive data, lock devices, or install spyware.

How Cyber Attacks Are Carried Out:

• Malware disguised as videos or PDF files related to the conflict.
• Phishing links mimicking trusted sources to steal login credentials.
• APK files posing as apps for war updates, which access device data or install ransomware.

Public Advisory:

For WhatsApp and Social Media:

• Do not open videos, images, or documents from unknown contacts, even if forwarded by someone you trust.
• Avoid clicking on links promising conflict updates or leaked footage.
• Do not install APK files sent via messaging apps. Only download apps from official app stores.
• Exit, report, and delete suspicious WhatsApp or Telegram groups sharing unverified content.
• In WhatsApp settings:
  Go to Settings → Storage and Data, and disable Media Auto Download.
  Enable Two-Step Verification under Account Settings.

For Email Users:

• Avoid opening emails from unknown senders, especially those with urgent subject lines.
• Do not click on links or download attachments in unsolicited emails.
• Always verify the sender’s email address.
• Enable two-factor authentication (2FA) and keep antivirus software updated.

General Cyber Safety:

• Follow updates only through verified news channels and official government handles.
• Use fact-checking platforms to verify claims.
• Avoid downloading or forwarding unverified videos, images, or links.
• Regularly back up important data and keep mobile security software updated.
• Never share one-time passwords (OTPs) with anyone.

Reporting:

Victims of such cyber scams are advised to call the Cyber Crime Helpline at 1930 or file a complaint at www.cybercrime.gov.in.

The public is urged to remain cautious, avoid forwarding suspicious content, and report any malicious activity.