Wedding Invitation Malware — The APK Scam Spreading Through WhatsApp

"You're invited to our wedding! Download the card here." The message arrives via WhatsApp or Messenger from someone you know, along with an APK file. Install it, and your phone belongs to a hacker.

This scam has swept across South and Southeast Asia and is expanding globally. The APK contains a Remote Access Trojan (RAT) — typically SpyMax — that gives attackers complete control over your device.

What the Malware Does

How to Tell Safe vs Dangerous Files

If You Installed the APK

1. Turn off internet immediately (Wi-Fi + Mobile Data)
2. Call your bank from another device — freeze accounts
3. Uninstall the suspicious app (Settings → Apps)
4. Factory reset if the malware persists
5. Change all passwords from a clean device
6. Report to local cybercrime authorities

Share Wedding Invitations Safely

Instead of APK files, share your wedding card as a PDF or image through a secure link. On LOCK.PUB, create a password-protected link containing your invitation — guests view it in the browser, no download required, no malware risk.

Bottom Line

Never install APK files received through messaging apps. A real wedding invitation is a PDF, image, or website link — never an APK. Protect your sensitive information with LOCK.PUB — encrypted and safe.