All mobile phone users issued key warning over ‘strange’ apps

Although software may seem harmless at first glance, downloading it could install malware on a device

Phone owners are being urged to ‘stop before they tap’ amid growing concerns over malicious apps. While this software might seem normal at first glance, downloading it could put malware on a device, risking personal and financial information.

Anti-fraud, cybersecurity and finance bodies have noted a ‘surge’ in Android malware and are urging people to be vigilant for unexpected updates or ‘strange’ app requests. These malicious apps often mimic legitimate tools in order to steal banking details.

The Cyber Defence Alliance (CDA), UK Finance, Cifas, and ThreatFabric have teamed up to highlight the problem. The organisations warn that in some instances, harmful apps may disguise themselves as file managers, PDF readers, phone cleaners, or even browsers like Google Chrome.

Garry Lilburn, operations director at CDA, said: “This crime highlights the growing prevalence and sophistication of mobile malware. As we work to better understand and disrupt this evolving threat, it’s crucial that financial consumers stay vigilant, follow recommended security tips, and take a moment to verify what’s in front of them – before becoming the next victim of this highly targeted fraud.”

READ MORE: Mariah Carey says ageing ‘just doesn’t happen’ to her in candid admissionREAD MORE: ‘I lost 13kg in six weeks as rare condition left me starving to death’

Although some malicious apps appear harmless at first, they may later activate damaging features through hidden updates. It’s warned that ‘busy’ or ‘waiting’ screens may be used to mislead phone users while concealing fraudulent activity.

Other warning signs include being unable to close the app or restart the device. Additionally, the app might ask for excessive permissions, like ‘accessibility’ access.

In light of this, phone users are urged to take extra precautions, especially when encountering unresponsive ‘banking apps’ or generic-looking apps such as file managers or phone cleaners. Asking you to re-authenticate during an active session, install strange updates or follow strange prompts may signal that something’s amiss.

Even if an app is legitimate, fraudsters can potentially use techniques that display fake login screens on top to steal login details. The organisations warned that many international crime groups are at the heart of mobile attacks.

Mike Haley, CEO of Cifas, commented: “The surge in Android malware is not just a tech issue – it’s a growing threat to consumers and to banking services we all rely on. Criminals are evolving their tactics faster than ever, using deception and stealth to bypass traditional security measures.

READ MORE: Benedict Cumberbatch says ‘horrific’ diet for Doctor Strange could ‘feed a family’READ MORE: Misunderstood illness leads to dark urine as doctor shares red flags

“The best defence is awareness. If something feels off – an unexpected update, a strange app request – stop before you tap and always seek a second opinion. Education and vigilance are our frontline tools in the fight against fraud.”

Meanwhile, Han Sahin, CEO of ThreatFabric, said: “Just as we’ve learned to be cautious with links, we now need the same vigilance when installing apps. This is the logical next step in staying safe, and public awareness is crucial.”

Dianne Doodnath, principal of economic crime at UK Finance, also added: “We encourage customers to stay alert to all threats of fraud, including the potential for criminals to trick people into downloading malware onto phones which could put your personal and finance information at risk of theft.

“It’s important that you keep your phone security system up-to-date and always download from trusted sources to ensure you’re protected from the risk of fraud and data harvesting.”

How can phone users stay safe?

The organisations have compiled five key tips. These include:

• Only download apps from trusted sources.
• Check app reviews and developer information before installing.
• Keep your device’s operating system and apps up to date.
• Report suspect apps or activity to your bank immediately.
• Be wary of apps requesting unnecessary permissions.