In the latest advisory issued by IRCTC, the department has urged people not to install any suspicious Android application called irctcconnect.apk on their mobile phones.People who use the Indian Railways Catering and Tourism Corporation website for booking train tickets and our purposes are asked to be more careful while replying to any message that appears to be sent by IRCTC. Popular messaging services like WhatsApp and Telegram are being used to spread harmful software, the Indian Railways has cautioned the public. People have been advised not to download any AKP files since doing so might damage or infect their mobile devices.Users should exercise additional caution when replying to any communications that appear to have been compromised, according to IRCTC. According to the report, the apps developers are scammers who pose as IRCTC to steal your personal information, including your UPI identification and other crucial financial data. It is imperative to stay away from downloading this software and to keep an eye out for any other suspicious apps of a similar nature.The railways further said that the fake app and the original look the same, which makes it difficult for the end user to distinguish between the two.Here is what IRCTC saidA malicious Android program (irctcconnect.apk) published on a phishing website (https://irctc.creditmobile.site) has reportedly been spreading over instant messaging services including WhatsApp and Telegram. The mobile device is infected by malicious Android software (APK file). To deceive victims into disclosing their important net banking credentials, such as UPI numbers, credit/debit card information, etc., these fraudsters are impersonating IRCTC officials and emailing phishing links in bulk while urging users to download this Android application.Given this, you are urged not to install this program and to protect yourself from such scammers. Download the official IRCTC Rail Connect mobile app only from the Apple Store or Google Play Store. Please be aware that IRCTC does not phone its users or customers to ask for their PIN, OTP, password, credit or debit card information, net banking credentials, or UPI details.Ways to avoid downloading apps from unknown sourcesOne of the easiest ways to avoid getting trapped is to not click on unknown links to update the apps. Users are always directed to official sources like the Google Play store for the authentic app.Another common source of stealing information, data or money is via OTP. If you ever receive OTP without requesting it, simply ignore that and never share it with anyone.Keep your software and apps up to date.If you receive any link or message to install the app, make sure your search the company or determine its authenticity.Apart from this, Android phones come with an app verification via a service called Play Protect. Make sure thats on and running on your phone.Lastly, always be cautious to give access to the app permissions, and avoid giving access to sensitive data or information, unless it is required.
