Date
24-08-2021
CERT-In has reported that, a fake SMS message is in circulation that falsely claims to offer an app to let users register for COVID-19 vaccine in India. The SMS message carries a link that installs the malicious app on android based devices, which essentially spreads itself via SMS to victims' contacts. The app also gains unnecessary permissions that attackers could leverage to acquire user data such as contact list.
Please find attached CERT-K vulnerability note for more information.
Attachment