.png){kind=logo}
Artificial intelligence is being integrated in almost every sector, and with every major advancement, there has been an increase in cyber fraud and hacking activities. A new cyber threat has emerged, referred to as 'Digital Lutera.' Reports indicate that this scam involves fraudsters gaining direct access to Android devices and using them to steal money from UPI accounts.
The new scam does not use any indirect ways to exploit victims. Scammers rely on altering an Android phone’s behavior rather than directly accessing UPI payment apps. ‘Digital Lutera’ is a fraud toolkit capable of bypassing digital payment systems. It mostly uses SMS-based OTP verification and UPI-linked bank accounts. Cybersecurity experts explained that this scam can take place in the form of APKs.
The scam starts with installing an APK file from a suspicious or unknown site. These links mostly come from unreliable sources. These files are usually injected with a Trojan just after they are installed. After installation, the app requests permission to read and write SMS messages. The moment the permission is granted, the phone is hacked and linked to payment apps.
Cybersecurity experts have shared some safety guidelines which to be followed to stay safe:
Avoid installing apps from external app stores. Try to install apps from official stores like the Google Play Store.
Do not fall for text messages that ask to install APKs. These text messages can take the form of a traffic challan or even an event invitation.
Ensure that the device is protected. Install Google Play Protect on the phone and update it to the latest version.
While downloading third-party APKs, ensure that they are not flagged by Google Play Protect. When APKs get flagged, stop the installation process.
Keep the phone’s software up to date with the latest version and security patch.
Users need to stop downloading random files from suspicious sites and keep their phones updated. This helps stay safe and protect the device from being hacked. However, experts continue to warn that scammers are finding new ways to carry out fraud. It is advisable to always stay alert and up to date with cybersecurity news.
Also read: Best Cybersecurity Analyst Courses for Beginners in 2026
