Sophisticated Fake Apps: A Growing Concern

**Executive summary:** The report details a smishing campaign in which attackers send fraudulent text messages (example link: www.insbb.in) that redirect victims to a site prompting installation of a malicious APK ('official.apk'); once installed and granted SMS permissions, the app harvests payment card details and personal information, enabling financial fraud and identity theft. The document highlights risks to enterprise resilience, provides user and organizational mitigations (verify senders, avoid links, use mobile security), and promotes Zimperium MTD as a defensive measure.