India's I4C flags fraudulent loan apps and WhatsApp scams

The Indian Cybercrime Coordination Centre (I4C), operating under the Ministry of Home Affairs, has flagged three fraudulent loan applications on the Google Play Store: Horizon Cash Service, Money Score Monitor, and Zelicredit. These apps targeted Android users seeking quick loans by masquerading as legitimate lenders with low interest rates, only to charge exorbitant fees after disbursement.

Investigations revealed that the apps harvested sensitive personal identifiable information (PII), including Aadhaar card details, financial information, contacts, and access to device cameras and galleries. Following a directive from the I4C under the Information Technology Act, Google has complied by removing or disabling access to the flagged URLs.

In a separate cybersecurity threat, the I4C warned of a WhatsApp-based ‘Boss Scam’. This campaign involves sending malicious compressed ZIP files disguised as routine financial documents from the Reserve Bank of India (RBI) or the Ministry of Corporate Affairs (MCA). When opened on Windows computers, these files install a Trojan that hijacks active WhatsApp Web sessions, allowing the malware to spread automatically to the victim’s contacts and groups.