Bengaluru, Nov 15 (SocialNews.XYZ) Dubious apps on Google Play Store have impersonated the Directorate of Kerala State's lotteries -- Kerala Lottery Online and India Kerala Lottery -- and are duping people, cybersecurity researchers warned on Tuesday.
Both the applications hosted on Google Play Store have over one million downloads and were found impersonating the Online Kerala lottery which operates in offline mode.
According to AI-driven cyber-security firm CloudSEK, threat actors are using referral links to spread their campaigns.
On the landing page of the referral link, threat actors can be seen mentioning 5 per cent of the winning amount to be shared with all the users of the referral link and a free entry/ticket to the lottery.
"Cashing on the popularity of Kerala lottery, threat actors have created multiple apps and websites to sell tickets and conduct lotteries which is banned by Kerala state government," according to a CloudSEK researcher.
To prove legitimacy, threat actors impersonated government entities and create fake advertisements from accounts having more than 200,000 followers on major social media platforms.
"Logos of the Directorate of Kerala State Lotteries, National Informatics Centre, and Kerala state were used by the makers of the dubious apps. According to the Kerala Lottery Department, the state sells only paper lottery tickets and prohibits online sales," said security researchers.
They found that both Kerala Lottery Online and India Kerala Lottery apps display the same privacy policy but operate under different names.
"Upon analysis of these two applications, the following email addresses were listed as developer's contact: OnlineKeralaLotto@gmail.com and sanjaykhankerala@gmail.com. This indicates that the government entity is not operating the apps," CloudSEK noted.
The applications ask for several permissions and notable among them was the request to install packages (required to install other applications on your device).
There were multiple Telegram groups, YouTube videos, Facebook and Twitter posts promoting the scam applications.
"Several websites have also been created to promote the apps and make the apps look legitimate," the researcher added.
Source: IANS
About Gopi
Gopi Adusumilli is a Programmer. He is the editor of SocialNews.XYZ and President of AGK Fire Inc.
He enjoys designing websites, developing mobile applications and publishing news articles on current events from various authenticated news sources.
When it comes to writing he likes to write about current world politics and Indian Movies. His future plans include developing SocialNews.XYZ into a News website that has no bias or judgment towards any.
He can be reached at gopi@socialnews.xyz