Fraudsters are executing a financial theft campaign aimed at healthcare seekers, using fake Google search results and malicious application files to compromise mobile devices and drain bank accounts. For now, such complaints are coming from the Indian state of Kerala.

How the Scam Works:

The Bait: You search online for hospital contact details or outpatient appointments and call a fraudulent phone number listed near the top of search results.

The Deception: Impersonators posing as hospital staff send an application package file directly through WhatsApp, claiming it is required to complete your registration or refund process.

The Trap: Installing the file grants the app hidden control over your device. The software reads incoming text verification codes and accesses payment tools, silently siphoning money through small transaction limits without triggering single-use verification alerts.

Red Flags to Watch For:

Phone numbers in search results that redirect to personal WhatsApp chats instead of official hospital booking numbers.

Requests to download application files directly from messaging platforms rather than official app stores.

Applications requesting unnecessary permissions to read text messages, notifications, contacts, or phone functions.

Data Defense Steps:

Verify contact details independently: Locate hospital numbers through official organizational domains or verified official social media accounts.

Never install app files from chat platforms: Refuse to install any file sent over WhatsApp, even if the sender claims to represent a legitimate healthcare provider.

Disconnect immediately if compromised: If you suspect a rogue app was installed, disconnect your device from the internet, contact your bank to secure accounts, and report the incident to cybercrime authorities.