{ "success": true, "data": { "id": 1733434, "msgid": "2-million-indonesians-fall-victim-these-15-apps-are-the-gateway-for-m-banking-thieves-1778567925", "date": "2026-05-12 11:35:00", "title": "2 Million Indonesians Fall Victim: These 15 Apps Are the Gateway for M-Banking Thieves", "author": "", "source": "CNBC", "tags": "", "topic": "Finance", "summary": "A McAfee report has identified 15 malicious apps on Google Play Store that have been downloaded over 8 million times globally, including by 2 million users in Indonesia, serving as entry points for cybercriminals to steal personal data and access mobile banking accounts. These apps, often disguised as fake online loan providers using \"Spy Loan\" tactics, lure users with promises of quick, easy loans and demand broad permissions to access sensitive information like contacts and SMS. Indonesian users are urged to immediately uninstall any of these apps and regularly update banking passwords to mitigate risks from this growing cyber threat in the digital finance landscape.", "content": "

Technological advancements in digital finance are a double-edged\nsword. On one hand, they simplify financial transactions, but on the\nother, they create vulnerabilities for cybercriminals to drain people\u2019s\nbank accounts.<\/p>\n

The latest report from cybersecurity firm McAfee has revealed\nshocking findings. As many as 15 dangerous apps have been detected\ninfiltrating the Google Play Store and downloaded by millions of users\nworldwide, including in Indonesia.<\/p>\n

These apps are known to act as \u2018backdoors\u2019 for hackers to steal\npersonal data and access victims\u2019 mobile banking (m-banking) services.\nIn total, the apps on this blacklist have been installed more than 8\nmillion times.<\/p>\n

\u201cSpy Loan\u201d Tactics and Fake Online Loans<\/p>\n

McAfee states that the majority of these apps masquerade as fake\nonline loan providers (pinjol) or what is known as Spy Loans. To attract\nvictims, the perpetrators offer enticing promises of low interest rates,\nlightning-fast processes, and very easy requirements.<\/p>\n

Their modus operandi is quite sophisticated. The apps use visual\ndesigns, logos, and names that mimic official financial institutions to\nappear credible. Moreover, these syndicates aggressively promote their\napps through advertisements on various social media platforms.<\/p>\n

Once the app is installed, users are prompted to grant extensive\npermissions, including access to contacts, photo galleries, and short\nmessages (SMS). This is where the trouble begins. The sensitive data is\nthen siphoned to the perpetrators\u2019 servers and used to intimidate\nvictims or hack into banking accounts.<\/p>\n

Targeting Users in Indonesia<\/p>\n

Of particular concern, Indonesia is one of the main targets alongside\nregions in South America and Africa. From the 15 dangerous apps, at\nleast three specifically target the Indonesian market and have been\ndownloaded by around 2 million local users.<\/p>\n

Cybercriminals typically use the stolen personal data to extort\nvictims with fictitious bills or exorbitantly inflated interest rates.\nIf victims do not pay, the perpetrators do not hesitate to carry out\ndigital terror using the data they have obtained.<\/p>\n

List of 15 Dangerous Apps<\/p>\n

Based on data compiled from Toms Guide, here is the list of apps that\nshould be immediately deleted from your phone if you have downloaded\nthem:<\/p>\n