Android users in India, beware these 2 lottery apps are fake

Cybersecurity company CloudSEK’s contextual AI digital risk platform XVigil has discovered two apps that are said to impersonate the directorate of Kerala State’s lotteries. The cybercriminals are using six UPI IDs to carry out fake transactions. The apps are: Kerala Lottery Online and India Kerala Lottery. The domain names owned by the group are: keralaticketone.com, lotteryadda.com, keralaticketonline.com, lottomegawin.com and kerala-ticket.com.

These apps lure people into buying lottery tickets online. Criminals use referral links to spread their campaign. To prove legitimacy, they masquerade as government entities and create fake advertisements from accounts having 200K+ followers on major social media platforms. They buy domains which act as payment gateway, and allow hackers to accept payments from major UPI apps. These apps are: Upibank.com, Upibank.in, indiacashpayment.com, Ybbpay.net and Sliderummy.in.