Wedding Invitation Malware — The APK Scam Spreading Through WhatsApp
Hackers disguise spyware as wedding invitation APK files shared via WhatsApp and Messenger. Learn how this malware works and how to protect your phone.
Wedding Invitation Malware — The APK Scam Spreading Through WhatsApp
"You're invited to our wedding! Download the card here." The message arrives via WhatsApp or Messenger from someone you know, along with an APK file. Install it, and your phone belongs to a hacker.
This scam has swept across South and Southeast Asia and is expanding globally. The APK contains a Remote Access Trojan (RAT) — typically SpyMax — that gives attackers complete control over your device.
What the Malware Does
| Capability | Damage |
|---|---|
| Read SMS | Steal OTPs → bank fraud |
| Camera/Microphone | Spy on you |
| Contacts | Spread malware to your contacts |
| Banking apps | Drain your accounts |
| Keylogger | Capture all passwords |
| GPS | Track your location |
Jak na to Tell Safe vs Dangerous Files
| Safe | Dangerous |
|---|---|
| .pdf file | .apk file |
| .jpg / .png image | Asks to "Install" |
| Website link | Requires "Unknown Sources" |
| Shows preview in chat | No preview |
If You Installed the APK
- Turn off internet immediately (Wi-Fi + Mobile Data)
- Call your bank from another device — freeze accounts
- Uninstall the suspicious app (Settings → Apps)
- Factory reset if the malware persists
- Change all passwords from a clean device
- Report to local cybercrime authorities
Sdílet Wedding Invitations bezpečně
Instead of APK files, share your wedding card as a PDF or image through a secure link. On LOCK.PUB, create a password-protected link containing your invitation — guests view it in the browser, no download required, no malware risk.
Shrnutí
Never install APK files received through messaging apps. A real wedding invitation is a PDF, image, or website link — never an APK. Protect your sensitive information with LOCK.PUB — encrypted and safe.
Keywords
You might also like
Diia App Phishing na Ukrajině: How Scammers Exploit Digital Government Services
Learn how phishing attacks target Diia (Дія) app users na Ukrajině, from fake government notifications to digital document theft. Complete ochrana guide for Ukrainian digital ID users.
Monobank & PrivatBank Phishing: How Scammers Steal Ukrainian Banking Credentials
A complete guide to Monobank and PrivatBank phishing scams na Ukrajině, from fake SMS messages to Privat24 credential theft and card cloning. Zjistěte, jak protect your accounts.
OLX Ukraine Scams: Fake Nova Poshta Deliveries and Payment Fraud
How scammers exploit OLX Ukraine with fake Nova Poshta delivery notifications, off-platform payment tricks, and phishing links. Complete průvodce bezpečností for Ukrainian buyers and sellers.
Create your password-protected link now
Create password-protected links, secret memos, and encrypted chats for free.
Get Started Free