Covid-19 vaccine registration: Beware of these apps
CERT-In has issued an advisory to warn citizens about fake vaccine registration apps for Covid-19 that can steal sensitive information
The Indian Computer Emergency Response Team (CERT-In) has alerted users to be mindful of fake vaccine registration apps floating in the cyberspace in the wake of Covid-19 pandemic. It released an advisory to forewarn citizens of a malicious viral SMS that claims to provide apps for quick vaccine registration but, in fact, steals the user’s personal information.
“The SMS carries a link that installs the malicious app on Android-based devices, which essentially spreads itself via SMS to victims’ contacts. The app also gains unnecessary permissions that attackers could leverage to acquire user data such as contact list,” the CERT-In was quoted as saying in it’s advisory.
This SMS redirects users to fake Co-WIN apps that, if downloaded, can gain illegal access to private information stored in your mobile phone. The CERT-In has warned users of five potential APK links that were found being circulated in the fraud SMS – Covid-19.apk, vaci_regis.apk, myvaccine_v2.apk, cov-regis.apk, vccin-apply.apk.
Its important to note that none of the above links would redirect you to Play Store (Android) or App Store (iOS). Instead, it gets downloaded on your phone as soon as you click on it. This is unusual because no verified app ever gets downloaded without seeking regular permissions. These APK files have the potential to steal passwords, etc.
Considering the disastrous impact of Covid-19, mounting death toll, discovery of new viral strains, threat of black fungus and limited stock of vaccines – people are bound to get tempted to get the jab as soon as possible. Fraudsters are taking advantage of the anxiety amongst citizens that may lure them to stick to such fake promises.
“Beware about phishing and fake domains, emails, text messages and phone calls which falsely claim covid vaccine registrations,” CERT-In said.
Meanwhile, official vaccine registration sites verified and promoted by the Indian government include the Co-WIN portal cowin.gov.in and the Aarogya Setu App. Do not trust any other app or website to register for the vaccine.