Sophisticated Scams Target Cellphones with Malware, Experts Warn

Cybersecurity experts are raising alarms about increasingly sophisticated digital scams designed to gain control of users' mobile phones. These attacks often begin with convincing impersonations, such as a bank representative offering a new credit card or a telecommunications operator promising to activate 5G service. The primary goal of these scams is to trick victims into installing malicious software, often disguised as an application update or a beneficial file. One described scenario involved a caller from Banco de Crédito (BCP) offering a new credit card, who then prompted the victim to install an APK file named "BCP beneficios 2026" under the guise of a service update. Similarly, another scammer posed as a Claro operator, offering service improvements and a discount via a WhatsApp link that led to malware installation. These attacks leverage personalized information, suggesting data breaches or illicit data markets are involved. The malware, often a banking trojan, aims to steal credentials, intercept one-time passwords (OTPs) from SMS messages, and even enable remote device control. Unlike traditional phishing, which ended after credential submission, these newer attacks focus on compromising the device itself, allowing prolonged access to sensitive information and financial data. Cybersecurity specialists emphasize the need for vigilance, advising users to cut off suspicious calls, avoid installing unknown files, and always verify information through official channels.