Malicious Free World Cup Streaming Apps Drain Rs 7 Million From Nepali Users

Kathmandu. More than Rs 7 million has been stolen from Nepali users through fake mobile applications promoted as free platforms to watch FIFA World Cup matches, according to the Nepal Police Cyber Bureau.

The bureau said it has received between 60 and 70 complaints from victims who allegedly lost money after downloading malicious applications disguised as World Cup streaming services.

Cyber Bureau spokesperson Superintendent of Police (SP) Dilip Kumar Giri said investigations are ongoing and complaints continue to arrive regularly.

“So far, around 60 to 70 complaints have been registered. Users were lured with promises of free World Cup streaming and directed to click suspicious links. After installing files sent through those links, victims lost an estimated Rs 7 million,” Giri said. He added that the number of new complaints has declined somewhat over the past four to five days.

According to cyber investigators, the fraud begins with advertisements on social media encouraging users to download seemingly legitimate streaming applications. Once installed, the apps prompt users to download an “update,” claiming it will improve performance and provide a better viewing experience.

To gain credibility, the update often displays the Google Play Store logo and presents itself as an official software upgrade. However, investigators said the file is actually malware designed to evade detection by security software through advanced coding techniques.

After installation, the malicious application requests accessibility permissions on the user's device. Many users unknowingly grant access, believing it is necessary for the app to function properly.

Investigators said that once permission is granted, the malware can take control of the device. In some cases, it temporarily disables the screen while remotely accessing banking and financial applications to carry out unauthorized transactions.

The stolen funds are typically transferred through multiple bank accounts or digital wallets, often using so-called “money mule” accounts opened in the names of other individuals.

The Cyber Bureau had previously issued a public advisory on April 20, warning users against clicking suspicious links or downloading applications claiming to offer free World Cup broadcasts.

Police have urged the public to use only authorized platforms to watch FIFA World Cup matches and to avoid installing applications from unverified sources. In Nepal, all 104 FIFA World Cup 2026 matches are available through official broadcasters for subscription fees ranging from Rs 549 to Rs 999.

पछिल्लो अध्यावधिक: जेठ २८, २०८३ १३:१२

टिप्पणीहरू