Free offline navigators may contain malicious code for data theft

The bait of a convenient offline map

Apps with offline maps seem like a convenient solution, especially when you need to use a navigator without internet access. However, behind the attractive offer, which is often advertised on social media, a serious threat may be hidden. Criminals are spreading malicious software that gives them access to victims' personal data and bank accounts.

The mechanism of the fraud scheme

Criminals post ads for a navigator that allegedly works without the internet, contains no ads, and is completely free. After clicking the link, the user lands on a third-party resource where they are offered to download a file via a Telegram bot.

Instead of the promised useful program, the person receives a malicious file. During installation, the system may request permission to install apps from unknown sources, as well as access to various smartphone functions. If the user agrees, criminals gain the ability to monitor actions on the device, intercept messages, and steal confidential information.

Particularly dangerous is the malware gaining access to SMS, notifications, or functions that allow controlling the gadget's operation. This gives scammers the opportunity to seize login credentials and gain access to financial services.

Security rules when installing apps

To avoid losing data and funds, follow these rules:

• Download apps exclusively from official stores, such as Google Play and App Store.
• Avoid installing files received via Telegram bots, third-party websites, or suspicious advertising links.
• Do not grant permission to install apps from unknown sources if their origin is not unequivocal.
• Carefully analyse the permissions requested by apps. A navigator does not need unjustified access to SMS, notifications, or device control functions.
• Do not rush to trust offers based solely on the fact that the app is positioned as free and useful.

Actions in case of suspected infection

If there are grounds to believe that the smartphone is infected, it is necessary to immediately stop using banking apps and other critical services on it. If possible, the device should be disconnected from the internet, and another, safe gadget should be used to change passwords for important accounts.

After that, the suspicious app needs to be deleted, and the permissions it was granted should be checked. If the program cannot be deleted or continues to run, it is worth seeking technical assistance. If you entered banking details or noticed suspicious transactions, you must immediately contact the bank and request account protection.

Facts of fraud should be reported to the Cyber Police via the official online form. Additional information about current fraud schemes and protection methods can be found on the StopFraud platform.

It is important to remember: even a seemingly useful app can become a tool in the hands of scammers. Smartphone security depends on the user's reasoned decisions: do not rush to download, verify the source, and do not grant apps unnecessary permissions.