An advisory has been issued by the Indian Railway Catering and Tourism Corporation (IRCTC) to all Android smartphone users. A file named irctcconnect.apk is not to be installed by users, according to the IRCTC. According to the organization, downloading files can result in malware being installed on your phone that can steal your information.
Telegram, WhatsApp, and other social media channels are being used to distribute malicious files. The irctcconnect.apk file may steal your personal data, such as UPI details, banking information, credentials, etc. On a serious note, the organization has requested its users not to install such files.
With the URL https://irctc.creditmobile.site, the malicious app hosts a phishing website where your details are captured and scammers can misuse them.
It is recommended that users download the official IRCTC app only from the Google Play Store or Apple App Store in order to book train tickets.
There have been reports that a malicious Android application (irctcconnect.apk) hosted on a phishing website (https://irctc.creditmobile.site) is being distributed via instant messaging platforms such as Telegram, WhatsApp, etc. The Android app (APK file) infects the mobile device. They are sending phishing links and urging users to download an android application impersonating IRCTC officials to trick victims into revealing sensitive net banking credentials such as UPI details, credit card details, etc.
Therefore, you should not install this application and keep yourself safe from such fraudsters by not installing it. From Google Play Store or Apple Store, download IRCTC’s official ‘IRCTC Rail Connect’ app.
It is important to note that IRCTC does not call its customers or users for their PIN, OTP, Password, credit/debit card details, Net Banking passwords or UPI details.”
