Source: Google Play Store, Websites

From the onset of the Paris Olympics, numerous apps mushroomed up. While their stated intent was to provide schedules, breaking news, results of games, medal tallies, and insights into events, under the hood, many such apps were found to not only track users but also extract private data and share it with advertisers. These apps collected user data, including internet browsing history, and without consent, shared it with third-party advertisers. This resulted in cybersecurity fraud, as people were bombarded with advertisements. Many of these apps also asked for multiple elevated permissions, allowing them to tap into personal and confidential information on the users’ devices. Such incidents have been highlighted in cyber fraud news and are part of online scams in cyber security.

Impact

• • Victims can suffer monetary loss by falling for such fake websites, a growing trend in the latest cyber frauds in India.

• • Requires dangerous permissions.

• • Monitoring nearby Bluetooth devices and accessing personal information, including location history, network, and Wi-Fi connection details.

• • Controlling the device’s settings, such as audio and vibration.

• • Permissions allow the app to prevent the phone from sleeping, potentially draining the battery.

These apps, installed by people eager to enjoy the Olympics, left users vulnerable to cyber security fraud by exposing their data, browsing history, location, preferences, and more. Improperly handled permissions can lead to identity theft, data breaches, and other cybersecurity frauds. Permissions and data can leave users vulnerable to unauthorized access, identity theft, data breaches, and other cyber threats.

Precautions

• • Never accept any permissions asked by any app unless you are sure of the app’s intent.

• • Don’t click to grant more permissions than required – even if that means having to live with limited functionality that serves your purpose.

• • Uninstall any apps that you are not going to need in the future.

This highlights the growing threats during large events like the Olympics and serves as a reminder of the increasing cybersecurity festival of fraudulent activities.