Uncovering the Lounge Pass Scam Campaign: Targeted Android SMS Stealer Preying on Air Travellers
ID: 9d3e7174-b2f7-5a6f-97ad-9d0c04b024fa
STIX ID: report--9d3e7174-b2f7-5a6f-97ad-9d0c04b024fa
Feed Name: CloudSEK Blog
Threat Score
CloudSEK researchers uncovered a scam using a fake 'Lounge Pass' Android app distributed via domains and WhatsApp/QR codes at airports that secretly steals incoming SMS and forwards them to a publicly exposed Firebase endpoint; reverse engineering and OSINT link multiple domains and APKs, revealing ~450 victims and approximately INR 9 lakhs (~$11k) stolen between July–August 2024, with provided APK hashes, domains, and mitigation advice.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.