How Black Hat Hackers Hacks Anyone With Just SMS

Beware of these kinds of messages. Of course, it won’t affect iPhone users. But, I tried checking out the link, It basically downloads an APK file something like icici-abx4.apk. I decompiled the APK and went through the code drilling down for 10–15 min.

What all it does :
1. Opens with ICICI logo & requests permissions to gain access to SMS permissions (READ_SMS, RECEIVE_SMS) and potentially steal sensitive information such as OTPs
2. Then opens a view with the ICICI internet banking phishing page, Asking to log in via Phone or UserID.
3. Once done it shows, you are logged in and then asks to do KYC. During the process, it takes PAN card, DOB, and ATM card details.
4. After that it shows “KYC successful it takes some time to process bla bla”
5. Runs in the background & keeps sending data to an API.

So once done, Scammer gets your Mobile number, PAN card, DOB, and ATM Card details. BOOM! Money flies 💸

And the spam number from which I received the SMS was located in (Patna, Bihar). Scammers are becoming more advanced these days!

Please make sure to warn your parents, and friends not to click these kinds of links with the panic of getting the bank account blocked

As a responsible citizen please do comment & repost this in your network for awareness.

Already reported to Cybercell, And the ICICI care team is on it ✅ but it is not just with ICICI. So keep spreading the information.