New Delhi: A website by the name of ‘Pradhan Mantri Yojana Loan’, which was previously linked to a Google Play Store application of the same name (the application has now been removed) is attracting Indians on behalf of granting loans, in exchange for personally identifiable information. information that can potentially be misused online, the New Delhi-based think tank CyberPeace Foundation warned on Friday. Also read: Google will close this service on February 24; This is how you can save your data
The personal data that was collected from the applicants, such as Aadhaar card, ration card, PAN card, are openly available on the website and can be misused by any hacker. Also read: Facebook bans Australian users from viewing any news content on media payment law
The CyberPeace Foundation, in conjunction with Autobot Infosec Pvt Ltd., launched an investigation into the matter to confirm whether the offer was a legitimate Government of India application or was simply posing as one. Also read: Crayta is now free for everyone on Google’s game streaming platform, Stadia
“The website www.pradhanmantriyojanaloan[.]com requests personal information and bank account details. After some random fictitious data was provided, it was redirected to a page with a thank you message, ”the foundation said in a statement.
Previously, the Android app would also redirect the user to the website requesting personal information, proof of address, and the rest.
“The website has a .com domain, which is peculiar in itself, as the websites that belong to the Indian government are hosted on .gov.in or .nic.in. Several grammatical errors were also noted on the website, ”the report noted.
“After decoding this QR code, a UPI string was obtained from PhonePe Merchant. An attempt was made to verify the UPI ID; however, it was concluded that it was invalid, ”the researchers said in the report.
After submitting the information, the user is taken to another page, where they are asked for an OTP sent to the mobile number that was provided when completing the request.
“Actually, no OTP was received on the shared mobile number. At the bottom of the page, it shows that the details have been submitted, ”the report noted.
A 10-digit receipt number was assigned. “Initially, it was assumed that the receipt number would not work since the OTP could not be sent, but it was accepted and the status was: your request is sent. Thanks! ”The report said.
The application was removed in the last Google drive to sanitize its Play Store of fake and malicious personal loan applications in the country.
Google removed around 100 instant loan applications from its Play Store that were involved in the alleged collection of personal data and its misuse, fraudulent and illegal practices of physical threats and the use of other coercive methods for loan recovery, according to the Ministry of Electronics and Information. Technology (MeitY).
Responding to a query in the Lok Sabha earlier this month, the IT Ministry said that upon being notified by law enforcement agencies of the availability of certain money loan applications that possibly did not comply with the applicable legal and regulatory framework, Google removed about 100 apps from December 2020 to January 20, 2021.
(With input from IANS)
.
She is a freelance blogger, writer, and speaker, and writes for various entertainment magazines.