Thirteen individuals, including minors, arrested for role in targeting Android users with malware scams
Thirteen individuals, aged between 15 and 25, were arrested for their suspected involvement in banking-related malware scams that primarily targeted Android users. The arrests occurred during a nationwide anti-scam operation conducted by the Singapore Police Force between August 14 and 25, 2023.
The arrested individuals included two 15-year-olds, as well as seven men and four women aged 17 to 25. Preliminary investigations revealed that these suspects allegedly aided the scammers by providing access to their bank accounts, internet banking credentials, or Singpass credentials in exchange for monetary rewards.
In addition, two women aged 29 and 39, along with another 15-year-old teenager, are currently assisting with the ongoing investigations.
The scams, which have been on the rise since January 2023, involve malware being installed on victims’ Android devices. This malware allows scammers to bypass security features on the phones, enabling them to steal banking credentials, log keystrokes, add money mules as payees, and make unauthorized transactions.
The scam targets victims who respond to advertisements, such as those for pet grooming services, on social media platforms like Facebook. Victims are persuaded to download a malicious Android Package Kit from unofficial app stores. Once installed, the malware compromises the phone’s security, and scammers can control the device to carry out fraudulent activities.
The police have warned the public to be cautious of suspicious links, QR codes, or mobile apps from third-party sources, as these may contain malware. They advised only downloading apps from official app stores and encouraged users to be vigilant with their banking and Singpass credentials.
The suspects face serious legal consequences. Convictions related to acquiring benefits from criminal activity could lead to up to 10 years in prison, fines of up to S$500,000, or both. Additionally, disclosing banking details or Singpass credentials could result in fines or jail terms under various Singaporean laws, including the Penal Code and the Computer Misuse Act.
