Scammers exploit Facebook ads to spread malware, targeting victims with fraudulent transactions.
Since August 30, Singapore has seen at least nine cases of malware scams, resulting in losses totaling $223,000. These scams typically involve fraudulent Facebook advertisements promoting food items. Victims are tricked into sharing their device screens and disabling “Google Play Protect” before downloading malicious Android package kit (APK) files that contain malware.
Once installed, these files allow scammers to take control of the victims’ devices remotely, leading to unauthorized banking transactions. In some cases, scammers have even posed as bank officers or law enforcement, attempting to prevent the victims from reporting the incident.
The Singapore Police Force has advised the public to be extra cautious when responding to online ads, particularly those on Facebook. They recommend downloading apps only from official app stores and verifying the legitimacy of app listings by checking developer information, download numbers, and user reviews. Any suspicious ads or content should be reported to Facebook, and any unauthorized transactions should be reported to the bank immediately.
If malware infection is suspected, the police suggest switching the device to flight mode, running an antivirus scan, and changing important passwords. In extreme cases, a factory reset may be necessary to remove the malware.
