IRCTC has said that the malicious app is being disseminated through commonly used messaging platforms such as WhatsApp and Telegram. The warning indicates that if you install the mentioned APK file, it can infect your mobile device.
IRCTC has further added that fraudsters are using the malicious app to get the personal information such as UPI details and other banking information. So, users should remain cautious and should not download any such app.
Here is the complete advisory issued by IRCTC:
It has been reported that a malicious Android application (irctcconnect.apk) hosted on a phishing website (https://irctc.creditmobile.site) is being circulated over instant messaging platforms e.g. WhatsApp, Telegram, etc. This android app (APK file) is malicious and infects the mobile device. These fraudsters are sending phishing links at mass level and insisting users to download this android application, impersonating IRCTC officials to trick victims into revealing their sensitive net banking credentials like UPI details, credit/debit card information etc.
In view of this, you are advised that please do not install this application and keep yourself safe from such fraudsters. Always download IRCTC’s authorized ‘IRCTC Rail Connect’ mobile app from Google Play Store or Apple Store.
Please note that IRCTC does not call its users/customers for their PIN, OTP, Password, Credit/Debit Card Details, Net Banking password or UPI details.
Warm Regards,
IRCTC
The users also need to keep in mind that IRCTC is the only Indian Railways website which is authorised to offer online railways tickets and catering services to the customers.
The IRCTC frequently advises users not to disclose their account number, ATM card details, PIN or OTP to anyone over the phone or email. They also make it clear that IRCTC officials will never call users to request personal information for refunds on canceled tickets.
