Fake Dating App APK Installations Make Users Wary of Startups
India’s cybercrime authorities have warned Android users about a campaign that uses dating app advertisements on social media to distribute malicious applications. The Indian Cybercrime Coordination Centre (I4C) says the operation attempts to move users from platforms such as Instagram and Facebook to external websites, where they are encouraged to download Android APK files outside established app stores. The same has also been done with malware impersonaling pornography apps, often using the excuse that they’re too adult to be available on app stores.
The risk comes from installing an unfamiliar application from an untrusted source, particularly after being redirected from an unsolicited advertisement. Established app stores provide additional security checks that can be bypassed when users manually install applications from external websites. Removing these apps normally can also sometimes be difficult, if given accessibility permissions that interfere with normal device controls.
The apps may request access to sensitive areas of a device, including SMS messages, contacts, photos, files and storage. They may also request access to Android’s Accessibility Services, which can allow applications to interact with parts of the device interface.
That access can create opportunities for financial fraud. If malicious software can read incoming text messages, for example, it could potentially capture one-time passwords or other verification information. I4C has also warned that some of the applications can deploy hidden VPN functionality, creating additional privacy and traffic-monitoring risks.
While this problem impacts users on a personal level far more than the industy itself, newer or lesser-known dating apps and services depend heavily on users trusting unfamiliar brands with personal information, photos and conversations. Fraudsters using dating-themed advertisements and fake apps can blur the distinction between legitimate emerging services and malicious operations.
Incidents of this kind could potentially damage overall trust in newer dating apps, making users more cautious about downloading unfamiliar platforms or engaging with dating services promoted through social media. Romance scams are already a major factor in how users decide to trust dating platforms, and even if new startups are launching safely via app stores, this loss of trust may result in more users avoiding smaller or newer dating apps that depend on a strong user base to kickstart their growth.
