Description
Indian Railway Catering and Tourism Corporation (IRCTC) is a popular platform used by a significant number of Indians to book train tickets. However, the platform recently warned its users about the high risk of cyber fraud. IRCTC has urged its users to remain vigilant while responding to any communication that may have been manipulated with the following fraudulent links. According to a report by Live Hindustan, IRCTC warned its users about a rogue Android app called “irctcconnect.apk”. The app is shared on instant messaging platforms such as WhatsApp and Telegram and hosts a phishing website "https://irctc.creditmobile.site". The warning issued by the IRCTC indicates that the application "irctcconnect.apk" can potentially infect mobile devices. Scammers spread a phishing link on a large scale, posing as IRCTC officials to trick unsuspecting users into downloading the app. Its goal is to obtain sensitive online banking credentials, including UPI details and credit/debit card information, from the victims who fall victim to the phishing attack.
To protect its users from scammers, the IRCTC advised them not to install this app. Instead, the notice urged users to always download the authorized mobile app "IRCTC Rail Connect" from the Google Play Store or Apple Store.
In addition, the disclaimer noted that the IRCTC will never request personally identifiable information, such as PINs, OTPs, credit card numbers, bank account numbers (ABALs), or UPIs, from its customers over the phone.
Following the IRCTC guidelines can help users ensure the security of their personal and financial information while using the platform. To ensure a safe experience while using the platform, it is essential that all users remain vigilant and immediately report any suspicious activity to the relevant authorities.
