If you typically purchase your train tickets through the official Indian Railway Catering and Tourism Corporation (IRCTC) website or app, we would like to inform you about a recent alert issued by IRCTC regarding a malicious Android software called “irctcconnect.apk”. IRCTC has explicitly advised users not to install this software.
Malicious Software Dubbed as IRCTC Causes Trouble
According to the report, there is evidence of dangerous software being disseminated through popular messaging applications such as WhatsApp and Telegram.
The installation of this apk file comes with a clear warning that it is malicious and may pose a risk of infecting your mobile device.
IRCTC has also issued a cautionary warning regarding the need to exercise vigilance when responding to communications that may have been tampered with.
The report indicates that criminals are using this malware to impersonate IRCTC and gain access to sensitive information, such as UPI and bank account numbers, for the purpose of theft.
Therefore, IRCTC strongly advises avoiding the installation of this app at all costs, and urges users to be vigilant for any similar apps that exhibit suspicious behavior.
IRCTC Asks Citizens to Be Prudent
IRCTC has alerted that a phishing website (https://irctc.creditmobile.site) has been discovered, which is hosting a malicious Android software (irctcconnect.apk) that is being shared through various instant messaging services such as WhatsApp, Telegram, and others.
IRCTC has confirmed that this APK file is harmful and may potentially infect any device on which it is installed.
Criminals often send phishing emails in large quantities with the intention of tricking consumers into clicking on links that direct them to malicious Android apps.
These apps are designed to appear as if they are from reputable institutions, such as IRCTC, but in reality, they are used to steal personal information.
IRCTC has advised that due to the aforementioned risks, it is highly recommended to avoid downloading and using the malicious software in order to safeguard oneself against potential scammers.
It is always advisable to use the official ‘IRCTC Rail Connect’ app, which is freely available on iOS and Android platforms, for booking train tickets.
Furthermore, IRCTC emphasizes that it will never ask customers for their personal identification number (PIN), one-time password (OTP), credit card number, bank account number (ABAL), or UPI over the phone.
