logo

Cyber Crime Wing Flags Fake Indo-Pak News, Malware-Laced APKs

In light of escalating tensions following Operation Sindoor, the Cyber Crime Wing of the Tamil Nadu Police has issued a high-priority cyber alert to the public, warning of a surge in phishing links, malware-laced APK files, and fake news content being circulated under the guise of Indo-Pak conflict updates.

The advisory, released on May 9, 2025, underscores that state-sponsored advanced persistent threat (APT) groups are exploiting heightened public interest in Indo-Pak developments to target individuals with malware, spyware, and phishing attacks. These cyberattacks are being distributed through WhatsApp, Telegram, email, and social media platforms, masquerading as war footage, breaking news, or leaked intelligence.

How the Attacks Are Delivered: Fake Videos, APKs, and Phishing Pages

The Cyber Crime Wing reports that attackers are disguising harmful files and links using titles like:

  • “Dance of the Hillary” (malicious video)
  • “Army_Job_Application_Form.pdf” (trojanized PDF)
  • “tasksche.exe” (malware-laden executable)
  • “Live War Updates App” (malicious APK file)

Once opened or installed, these files compromise the device by stealing personal data, accessing sensitive documents, or even locking phones with ransomware. The infected devices may also be used to further propagate malware or hack into users’ bank and social media accounts. Additionally, phishing links embedded in messages mimic government websites or trusted news sources, tricking users into submitting login credentials or other sensitive information.

Cyber Hygiene Advisory for the Public: WhatsApp, Email & General Use

The Tamil Nadu Police have issued comprehensive guidelines for safe digital practices during the ongoing cyber threat wave:

WhatsApp & Social Media Safety Tips:
  • Never open videos/images from unknown senders, even if forwarded by someone you know.
  • Avoid forwarding unverified messages or media.
  • Do not install APKs received via messaging apps—only use official app stores.
  • Disable auto-download of media in WhatsApp (Settings → Storage and Data).
  • Enable two-step verification in WhatsApp to prevent account takeover.
  • Report and exit suspicious groups sharing inflammatory or unverified content.
Email Users Should:
  • Avoid opening emails from unknown senders, especially with Indo-Pak themed subject lines.
  • Don’t download attachments or click on links in unsolicited emails.
  • Verify email addresses closely, phishing attempts often mimic legitimate organisations.
  • Enable 2FA (Two-Factor Authentication) on email accounts.
  • Use updated antivirus software and activate spam filters.
General Cyber Safety Measures:
  • Get updates only from verified news sources and official government handles.
  • Don’t share or download exclusive/conflict-related content without verification.
  • Back up your data regularly, and update antivirus and mobile security tools.
  • Avoid sharing provocative or unverified content, especially during geopolitical crises.
  • Verify all information through official channels before acting or forwarding.
Report Suspicious Activity or Victimisation

Citizens who encounter or fall victim to such cyber threats are urged to take immediate action:

The Cyber Crime Wing emphasises that public vigilance is key to disrupting the spread of misinformation and preventing large-scale identity theft or financial fraud. By adhering to digital safety best practices and reporting suspicious content, users play a critical role in national cyber resilience.