invitation.apk malware
Important Facts of the News
- Date of advisory: 01 November 2025, 07:45 PM.
- Issuing authority: Rajasthan Police, directed by Police Director General Rajiv Kumar Sharma.
- Cyber cell point person: DIG (Cyber Crime) Vikas Sharma.
- Malicious file name used by criminals: invitation.apk (fake e-invitation APK).
- Key data at risk: SMS, contact list, camera and file access, banking details, OTPs and passwords.
- Five recommended safety actions listed by police.
- National cyber complaint portal: https://cybercrime.gov.in for lodging complaints.
- Cyber helpline number for initial reporting: 1930.
- Rajasthan Police helpdesk numbers: 9256001930 and 9257510100.
Overview: fake wedding invites as a trap
Rajasthan Police have warned the public about a surge in deceptive e-invites and gift links being shared over social media, WhatsApp and email during the wedding season. The alerts say cyber criminals are distributing a malicious Android package commonly labelled invitation.apk. Recipients who treat these messages as genuine event invitations and install the file may unknowingly grant a backdoor program wide access to their mobile devices.
How the invitation.apk malware operates
According to the cyber crime branch, once the APK is installed it requests sensitive permissions and begins covertly collecting information. The malware can read SMS messages, harvest the contact list, access files and the camera, and capture authentication data such as OTPs and passwords. Criminals then use this captured data to carry out financial fraud and other scams, putting victims’ savings at risk.
Police safety advice
Five essential precautions
- Verify the sender before opening any e-invitation or gift link.
- Keep the mobile setting “Install from unknown sources” disabled at all times.
- Download apps only from authorised stores like Google Play or Apple App Store.
- Use a reputable antivirus or mobile security application on your device.
- Do not click on links or install attachments from unexpected messages.
How to report if you are targeted
Victims or those who suspect an infection are urged to inform the police immediately. For assistance, call the national cyber helpline at 1930 or file a complaint on the national portal at https://cybercrime.gov.in. For local help, contact the Rajasthan Police headquarters helpdesk at 9256001930 or 9257510100.