Fake SMS In Circulation For COVID Vaccine Registration, CERT India Sounds Alert

Share this News:

New Delhi, 9th July 2021: The Computer Emergency Response Team (CERT), the nodal agency in India for responding to computer security incidents, has issued an advisory about fake SMS in circulation for Coronavirus disease (COVID19) vaccine registration.

The advisory states, “It has been reported that a fake SMS message is in circulation that falsely claims to offer an app to let users register for COVID-19 vaccine in India.

The SMS message carries a link that installs the malicious app on android based devices, which essentially spreads itself via SMS to victims’ contacts. The app also gains unnecessary permissions that attackers could leverage to acquire user data such as contact list.

The malicious android app is under circulation with different names such as:

Covid-19.apk

Vaci__Regis.apk

MyVaccin_v2.apk

Cov-Regis.apk

Vccin-Apply.apk

Apply-Vacin.apk

Register-CWIN.apk

Best Practices and Recommendations

  • Always use official CoWIN portal (https://www.cowin.gov.in) for covid vaccine registration.
  • Beware about phishing and fake domains, emails, text messages and phone calls which falsely claim covid vaccine registrations.
  • Check the integrity and legitimacy of URLs before providing login credentials or clicking a link.
  • In device settings, do not enable installation of apps from “Untrusted Sources”.
  • Beware about downloading, opening a file or document received over various channels like SMS, email.
  • Do not submit personal and financial information to unknown and unfamiliar websites and apps.
  • Consider using Safe Browsing tools, filtering tools (antivirus and content-based filtering) in your antivirus, firewall, and filtering services.

Join our WhatsApp GroupTelegram, and Twitter for every update about Pune and PCMC