82 Cases of Malware Scams Reported in Singapore – $625,000 Lost to Cybercriminals
Singapore, January 2025 – Scammers are hitting new lows with a dangerous malware scam that’s left victims across Singapore reeling. Since December 2024, there have been at least 82 reported cases of this scam, resulting in a staggering $625,000 in losses.
In a wave of digital deceit, scammers are targeting users through fraudulent Facebook and TikTok ads offering seemingly legitimate services like travel deals and cleaning services. Unsuspecting victims, eager for deals, fall prey to these ads, leaving their personal contact details in response. What happens next? A series of devious moves designed to trick, steal, and compromise personal information.
Let’s break down how these malware scams work, how to protect yourself, and what to do if you’ve fallen victim.
How the Scam Works: The Malware Trap
Step 1: The Bait – Fake Ads on Social Media
It all starts innocently enough. Victims click on Facebook or TikTok ads that promise discounts or offers on things like vacations or cleaning services. These ads appear completely legitimate, leading users to fake websites where they’re prompted to leave their contact details. This is where the trap begins.
Once the scammers have your contact details, they’ll quickly reach out via WhatsApp. They’ll ask for a small payment of around $5 as a membership fee or an upfront deposit—but that’s just the first part of the scam.
Step 2: The Phishing Link – The First Red Flag
To make the payment, the scammers send victims a phishing link. Victims are instructed to enter their credit or debit card details, and while the payment may seem to go through, problems soon arise. People who fall for this scam often experience payment failures or are asked to resolve the issue with a seemingly helpful solution.
Here’s where the scam gets much worse: victims are asked to download a malicious app.
Step 3: The Malicious APK – A Dangerous Download
The scammers now ask the victims to download an Android APK file through WhatsApp. An APK is a type of application file used only on Android devices. It sounds simple, but this app is far from harmless. It’s a malicious application designed to give the scammers remote access to the victim’s phone.
Once downloaded, this malware can hijack the victim’s phone, allowing the scammers to steal sensitive information. This includes SMS one-time passwords (OTPs), which are crucial for authorizing financial transactions. Armed with this data, scammers can carry out unauthorized transactions on the victim’s credit or debit card—sometimes even from the victim’s own phone.
Step 4: Hidden Tricks – Disabling Google Play Protect
To make sure the malware doesn’t get detected, some scammers go a step further by guiding victims to disable Google Play Protect, a security feature that helps protect Android devices from harmful apps. This is a critical step in the scam because without Play Protect, victims won’t receive alerts if the malware is installed.
At this point, the victim’s device is fully compromised, and the scammer can continue to monitor and steal sensitive information without being detected.
What To Do if You’ve Fallen Victim to This Scam
If you suspect that your phone has been infected with malware or that you’ve downloaded a malicious app, don’t panic! The police have shared some steps to help you regain control and minimize further damage.
Step 1: Switch to Flight Mode & Disconnect
The first thing you should do is turn your phone to flight mode and make sure that your Wi-Fi is switched off. This helps to prevent the malware from sending any further data back to the scammers.
Step 2: Run an Anti-Virus Scan
Next, it’s crucial to run an anti-virus scan on your device. If you don’t have an anti-virus app, consider downloading a reputable one from the Google Play Store (once you’ve reconnected to the internet). Many apps specialize in detecting and removing malware from Android phones.
Step 3: Contact Authorities and Report the Scam
If you haven’t done so already, report the scam to local authorities immediately. The Singapore Police Force is actively investigating these cases, and your report could help prevent others from falling victim to similar attacks.
How to Protect Yourself From Malware Scams
1. Be Cautious with Social Media Ads
As tempting as they may look, ads on Facebook and TikTok can sometimes be misleading. If an offer seems too good to be true, it probably is. Always double-check the legitimacy of the ad and the company behind it.
2. Avoid Clicking Suspicious Links
Never click on phishing links sent via text messages or WhatsApp. If you receive a message asking for your card details or requesting a payment, always verify the source. A legitimate company will never ask for sensitive information via a messaging app.
3. Don’t Download Unsolicited Apps
Always be wary of downloading apps from sources that aren’t the Google Play Store. If you’re asked to download an app from a link sent over WhatsApp or another messaging service, it’s best to decline. Stick to apps that are available on trusted app stores.
4. Enable Google Play Protect
Google Play Protect is your first line of defense against malicious apps. Make sure it’s turned on in your device’s settings. This will help detect and remove any harmful apps before they can cause damage.
5. Regularly Update Your Phone’s Software
Make sure that your phone’s operating system and security software are always up to date. New software updates often include patches for vulnerabilities that scammers and hackers might try to exploit.
Scam Statistics: A Growing Threat
Malware scams are on the rise in Singapore. In 2024, scam victims lost a total of $385.6 million in the first half alone, with 26,587 reported cases. This alarming trend underscores the importance of staying vigilant and protecting your personal information from cybercriminals.
Final Thoughts: Stay Safe and Stay Alert
As scams evolve, so too must our ability to recognize and avoid them. The malware scam targeting users through Facebook and TikTok ads is just the latest trick in a growing wave of cybercrime. While these scams can be devastating, knowing the warning signs and taking quick action can help protect your finances and personal information.
By following the steps mentioned above—be cautious, don’t click suspicious links, and stay updated—you can significantly reduce your chances of falling victim to scams like these. Remember: ACT—add security features, check for signs of fraud, and tell others about scams.
Stay safe, stay aware, and protect yourself from cyber threats!
