If you have received any message that contains a link asking students to download an application to register for PM Laptop Scheme, beware!

The Research Wing of CyberPeace Foundation along with Autobot Infosec Private Limited have conducted a study based on an SMS received that contained a link tempting students to download an application for registering the PM laptop scheme which promises a free laptop.

On visiting the given link it redirects the user to a page with an option to download. Upon clicking, it prompts the user to download an apk file named PM-LAPTOPS.apk which claims to be a registration application for free laptop scheme.

Once the user installs the application on an android device, like any other android application, the app asks the user to give some permission like - access to contacts, access to SMS, access to the phone calls, access to the user location etc.

After giving the permissions mentioned it asks users to register their mobile number in order to enroll in the so-called free laptop scheme. It prompts a dialog box after providing the number and hitting the ‘REGISTER NOW’ button.

Warning Signs: After a detailed study, the research team found that:

• The campaign is pretended to be an offer from Government of India but the site used here to circulate the application is hosted on a third party domain whereas any websites which belong to the Government of India are usually hosted on gov.in or .nic.in.

• Grammatical error found in the webpage used to circulate the application.

• The application asks for several unnecessary access permissions of the device such as phone calls, location, and access to SMS, etc.

• The application sent some information like IP address, android id, campaign id etc from the device in the background to another third party domain app.adjust[.]world.

To read the full report click here.

CyberPeace Advisory

CyberPeace Foundation recommends that people should avoid opening such messages sent via social platforms. One must always think before clicking on such links or downloading any attachments from unauthorized sources. Some suggestions shall include:

• Do not download any application from any third party sources. Download original application from the official play store.

• Falling for this trap could lead to compromising the whole system such as access to Microphone, Camera, Text Messages, Contacts, Pictures, Videos, Banking Applications etc. as well as financial loss to the users.

• Do not share confidential details like login credentials, banking information with such types of scam.

• Never share or forward fake messages containing links with any social platform without proper verification.