{
    "success": true,
    "data": {
        "id": 1716696,
        "msgid": "warning-for-android-phone-owners-bank-accounts-can-be-drained-in-an-instant-1777888502",
        "date": "2026-05-04 16:25:00",
        "title": "Warning for Android Phone Owners: Bank Accounts Can Be Drained in an Instant",
        "author": "",
        "source": "CNBC",
        "tags": "",
        "topic": "Technology",
        "summary": "A financial scam exploiting Telegram's Mini App feature has been uncovered, distributing malware to Android devices and potentially draining victims' bank accounts. Scammers impersonate trusted brands like Apple and Disney to lure users into phishing sites via fake bots, prompting deposits or tasks under false promises of earnings. Cybersecurity firm CTM360 warns of the growing use of such platforms for crypto frauds, AI tools, and streaming sites, urging vigilance among users.",
        "content": "<p>Jakarta, CNBC Indonesia - A financial scam has been discovered that\nexploits Telegram\u2019s Mini App feature. This method is used to distribute\nmalware on Android phones. Telegram Mini Apps are lightweight web\napplications that run within Telegram\u2019s built-in browser. This feature\nallows users to access payment services, accounts, and interactive tools\nwithout closing the main application. The scam modus operandi was\nidentified by CTM360. The FEMITBOT platform was found in API responses\nand uses Telegram bots and Mini Apps to create seemingly legitimate\napplications, as cited from Bleeping Computer on Monday (4\/5\/2026).\nScammers disguise themselves as well-known brands or companies to build\ntrust with potential victims. Some impersonated brands include Apple,\nCoca-Cola, Disney, eBay, IBM, Moon Pay, Nvidia, and YouKu. CTM360\nresearchers discovered scam activities using a shared backend. Several\nphishing domains were identified with the same API responses and\ninfrastructure. CTM360 also reported that the FEMITBOT platform is used\nfor scams such as fake cryptocurrency services, financial tools, AI\napplications, and streaming sites. The scam is executed through Telegram\nbots that include phishing sites. Users who interact are prompted to\nclick \u201cStart\u201d. After completing that step, the bot launches a Mini App\ndisplaying the scam site. Within the site, there is a dashboard showing\nfake balances or earnings, often pressuring victims with countdown\ntimers or limited-time offers to engage. Users are asked to make\ndeposits or complete tasks when attempting to withdraw the offered\nfunds. It is also reported that existing scam campaigns use tracking\nscripts like Meta and TikTok tracking pixels, typically to monitor user\nactivity, measure conversions, and optimise performance.<\/p>",
        "url": "https:\/\/jawawa.id\/newsitem\/warning-for-android-phone-owners-bank-accounts-can-be-drained-in-an-instant-1777888502",
        "image": ""
    },
    "sponsor": "Okusi Associates",
    "sponsor_url": "https:\/\/okusiassociates.com"
}