The cybersecurity company ESET recently identified Progressive Web Apps (PWAs) being used to target Android and iPhone users with fake banking app updates.  When the targeted victim logs into the fake app, it steals their username and password thereby putting their bank account in serious jeopardy.  PWAs are websites that look like apps.  In fact, back in the early days of the iPhone, they were the only way for a third party developer to create an app.  The scammers use text messages, phone calls and ads on social media to lure people into downloading the phony app which is represented as being a necessary security update for the victim’s banking app.

TIPS

Trust me, you can’t trust anyone.  As I often remind you, whenever you get an email, phone call or text message from anyone, you can never be sure who is truly contacting you so you should never give personal information or make a payment in response to any communication unless you have absolutely confirmed that the communication was legitimate. In the case of a banking app update, you should contact your bank directly to confirm if one is being issued by your bank and get the proper updates directly from your bank.  In addition, to further protect you from this type of phishing scam, you should use dual factor authentication for your banking app so even if your username and password were compromised, no one would be able to access your bank account through your banking app.

If you are not a subscriber to Scamicide.com and would like to receive free daily emails with the Scam of the day, all you need to do is sign up for free using this link. https://scamicide.com/scam-of-the-day