Microsoft has warned WhatsApp users in India about a high-risk malware campaign targeting mobile banking operations.

According to a blog post by the tech giant, cybercriminals are employing social engineering tactics to dupe users into downloading malicious apps onto their Android devices. Posing as banks, government agencies, or utility services, these attackers trick users into downloading malicious apps that steal personal details, banking credentials, and other sensitive information.

See Also: Taj Hotels Massive Data Breach: 15 Lakh Customers’ Data Potentially Exposed

Microsoft has identified two specific malicious applications targeting Indian banking customers. One involves a fake banking app designed to steal account information, while the other targets payment card details.

To counter these threats, Microsoft suggests installing apps only from official app stores like Google Play Store and Apple App Store, avoiding unknown links from untrusted sources, using mobile security solutions like Microsoft Defender for Endpoint on Android, and disabling the ‘Install unknown apps’ feature on Android devices.

Despite no direct impact on genuine banks, these cyber-attacks often target customers of large financial institutions by impersonating these entities. The campaign has now shifted its focus to directly sharing malicious APK files with Indian mobile users, exploiting the trust they place in legitimate organizations.

Read Next: Coca-Cola Dives Into India’s Ready-To-Drink Tea Market With ‘Honest Tea’