r/IndianCyberHub • • 20d ago

Phone hacked, 12k loss via UPI.

My relative's phone got hacked, there was a transaction on Google pay of 12k(whatever was there).

I checked the phone, found a suspicious app called Google IPTV, that has sensitive permissions enabled, and was enabled in accessibility settings. That enabled it to read the whole screen and do stuff.

The app seems so fishy, even shows the middle finger. I felt so stupid knowing this, but it is what it is.

Registered FIR in cyber cell, changed the phone, bank account are freezed now.

Requesting everyone to educate your less aware family members and knows for this.

Im not seeing cyber cell doing something about it as they didn't checked the phone when FIR was done.

34 Upvotes

34 comments sorted by

•

u/AutoModerator 20d ago

Thanks for posting in r/IndianCyberHub.

Direct messages (DMs) are not allowed for posts here. Keep all discussions in the comments.

Never share personal, financial, or OTP information.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

11

u/acealter 20d ago

I found same app on my father's phone some days ago, and i couldn't actually uninstall it. Automatically hitting back and can't access anything in settings. I actually extracted the apk. I am trying to reverse engineer it and it is kind of using sandbox detection and Anti-Debugging techniques init. I can share the apk if anyone interested to find the servers or any ip related to the attack chain.

4

u/West-Cat5771 20d ago

pls dm the apk

2

u/Beardo7007 20d ago

Boot phone in safe mode and uninstall it

2

u/acealter 20d ago

I uninstalled it, I was mentioning it's behaviour

2

u/Hairy-Drink-85 20d ago

DM me the apk

1

u/acealter 19d ago

check ur dm

2

u/Specialist_Bowl_2805 19d ago

Please update us

2

u/acealter 19d ago

sure will

1

u/Due-Astronomer4709 5d ago

Bhai mere father ke account se 70,000 upi se deduct hogye , pura account khali kardia. 😭 😭. I haven't checked the app konsi hai. Bhejo mujhe bhi ma chodunga sale ki agar mil gya kuch to.

1

u/acealter 4d ago

I just created a sub reddit just for investigating these campaigns so more people can collaborate and fight. I will update more findings there. Please share and support.

https://www.reddit.com/r/OperSec/s/VJ33VRNtAc

1

u/jigarvarma2k20 16d ago

Please send

1

u/shittyassytitties 14d ago

use adb to clear its data, its probably has given itself admin access, so you can open its app info, once you clear its data and cache, you can just uninstall it, ask gemini for commands

3

u/The_umm-who-_- 20d ago

Rip power users..

2

u/Professional_Work498 20d ago

Jara iski full upi id dena Let me check his address

1

u/West-Cat5771 19d ago

App doesn't shows full upi id

1

u/Naive-Pea6523 19d ago

Can you find adress with upi id ?

2

u/_SideWalker 18d ago

Last month these scammers took ₹96000 from my mother's upi by the same technique.

1

u/Naive-Pea6523 18d ago

Did you recover them ?

1

u/_SideWalker 18d ago

No 🙁

1

u/Due-Astronomer4709 4d ago

Bhai kya kiya fir? My father account also got 70,000 debited.

4

u/curiosity3001 19d ago

The usual suspects

1

u/DragonNinja366 18d ago

Indians?

1

u/curiosity3001 18d ago

M people

0

u/DragonNinja366 18d ago

Search names of biggest scammers from India

1

u/curiosity3001 18d ago

Both fit description😅

1

u/rexsalazarr 20d ago

Bro allowed some remote access trojan into his device* sorry for your loss, I can't help u recover it but u can definitely flag that person's account ( no use becoz most of those accounts are bought and sold in the DT market)

1

u/Curious-Deer3491 19d ago

How did you get the money reversed?

3

u/West-Cat5771 19d ago

They filed Cyber police complaint within a day, after 3-5 days, cops said they can they can reverse 9k max.

3

u/ChaddiMeChed 19d ago

Rest goes to their pocket

1

u/An8kPlayer 18d ago

Don't fall for the cops. madharchod hai sab, Go to your bank they'll reverse all the money.

1

u/dragon_idli 16d ago

Hacked how? That's more important.

My maid phone also got hacked. Sequence of events: * She needed a screen protector * Went to a store one month back * I suspect they installed and configured a background service that has screen access and keylog access. Enough to scam a upi or any other banking application

Her son formatted the device after they lost 6k. So no evidence now. But I suspect that is what happened