Scam type
Malware and ransomware
Malware usually arrives as something you were asked to open: an app from a chat, an attachment, a project from a recruiter. On a phone it reads your OTPs. On a computer it takes saved passwords and keys. On a business network it can lock everything. Disconnect first, then work out what it reached.
How to recognise it
- You installed something a stranger sent you
- An app you do not recognise has SMS or accessibility permission
- Files renamed, or a ransom note on the screen
The 3 guides
-
Malicious WhatsApp APK Scam in India: How to Spot It
Scammers send fake bank, KYC, wedding, and parcel APK files on WhatsApp that drain accounts in minutes. How to spot the fake app and what to do.
Do this now
- 1. Aeroplane mode, now It stops the app forwarding your OTPs onward.
- 2. Call your bank from another phone Tell them the device is compromised. Freeze everything.
-
Fake LinkedIn Recruiter Malware Scam (Trifleck)
A LinkedIn recruiter from 'Trifleck' tried to install malware on a Bengaluru engineer. How to spot the pattern, what to do if hit, and the full forensic record.
Do this now
- 1. Disconnect the machine Pull the cable, turn off Wi-Fi. Do not clean it.
- 2. Rotate every credential it touched Browser passwords, cloud tokens, SSH keys, wallets.
-
Ransomware Attack in India 2026: What To Do
Hit by ransomware in India? Do not pay. Disconnect, save evidence, report to 1930 and cybercrime.gov.in. Free decryption tools and prevention basics.
Do this now
- 1. Disconnect immediately Unplug the cable, turn off Wi-Fi. Stop it spreading.
- 2. Do not pay, delete nothing Keep the note and the encrypted files. Some have free decryptors.