Warning about scams involving fake websites impersonating EVN (Vietnam Electricity) to trick people into installing apps containing malware that drain their bank accounts.
EVN warns of fake websites that trick users into installing applications containing dangerous malware, capable of taking control of their phones and draining their accounts.
The Vietnam Electricity Group (EVN) has just issued an urgent warning about the appearance of a website impersonating the electricity industry's brand. Malicious actors created this website to trick people into downloading applications containing dangerous malware, thereby gaining control of their devices and stealing money from their bank accounts.
Sophisticated tactics to trick users into installing malicious files.
According to EVN, the fake website is operating at the following address:evnquocgia(.)comThey copied the entire interface, visual identity, and official logo of Vietnam Electricity Corporation. The goal of the fraudsters was to create a credible facade to deceive electricity customers.
On this fraudulent platform, the system incorporates fake Google Play and App Store buttons to trick users into downloading an application package called "CSKH EVNSPC". EVN and the Southern Power Corporation (EVNSPC) affirm that this software is not part of any system released by the power industry.
Mechanism of operation and security risks from malware that takes control of a system.
This malicious application is designed to bypass users' usual security layers by requesting extensive operating system permissions. Once installed on a phone, the software can trigger a range of sophisticated espionage activities:
- Automatically read and steal OTP codes:Intercept authentication messages from banks and e-wallets.
- Screen recording and background audio capture:Collecting login information, keyboard input, and other private data.
- Inserting a fake interface (Overlay attack):They overlaid a fake interface onto the legitimate banking app to collect passwords and PINs.
- Gaining remote control of the device:The attacker can directly manipulate the device to execute unauthorized money transfers without the owner's knowledge.
Emergency prevention and response measures
EVNSPC emphasizes that its official customer care application is exclusively distributed through two reputable app stores: Google Play (Android) and App Store (iOS). The electricity sector absolutely does not send download links for the application directly via SMS messages or any social media platform.
To protect personal equipment and property, people should follow these recommended steps:
- Absolutely do not access the aforementioned website address and do not download APK files from unknown sources.
- If you have accidentally installed a fake application, you need to uninstall the software immediately and contact your bank's hotline to block your account and online services urgently.
- Report the incident to the police or contact the official support hotline of the electricity sector via EVN (1558) or EVNSPC (1900 1006 - 1900 9000) numbers.
