Fraud using SriLankan airlines name detected

A fraud carried out using the name of SriLankan Airlines has been uncovered.

The scam is conducted by contacting individuals via WhatsApp accounts while pretending to offer services from 'SriLankan Airlines,'and directing them to install a mobile application named 'Sri Lankan.apk' through three fraudulent websites.

It has been observed that this application is a malicious banking trojan. Once installed, it requests permissions that allow remote access to the mobile device, enabling the exposure of sensitive personal data.

Accordingly, the malicious actors manipulate victims into performing financial transactions and obtain One-Time Passwords (OTP), bank account details, and authentication data (such as fingerprints and facial recognition). Through this, they gain unauthorized access to banking applications and fraudulently transfer money to other bank accounts.

The police further stated that the following phone numbers are being used for this operation,

077-4558361, 011-7771979, 077-5791209, 074-3268200, 074-1142208