Cybersecurity experts warn of rising fraud linked to APK files on Telegram 

According to the authorities, 40 percent of Telegram users in Uzbekistan are now exposed to sharply increasing cases of financial theft and data breaches caused by clicking on APK files received through the messenger.

Jahongir Sagdullaev explained what users should do to protect themselves in such situations.

“These APK files are created by fraudsters and designed with flashy, attention-grabbing phrases such as ‘Is this your photo?’ or ‘Wedding invitation’. If users open these files with just one click, the fraudsters gain access to their personal information, contacts, messages, photos and videos, as well as various applications installed on their phone.

“Therefore, if you receive any file on Telegram that ends with ‘APK’, the first rule is not to open it. Delete it immediately,” he said.

The expert also described the urgent steps users should take if they have already opened a malicious file:

“To minimize the damage, disconnect the phone from the internet and switch it to airplane mode. Then go to the ‘apps’ section and check whether any unfamiliar applications have been installed. If you find any new or unknown app, delete it immediately. Alternatively, back up all necessary data and restore the phone to factory settings. If the phone is linked to any payment services, disable SMS services as well.”

To help prevent such fraud cases, the Cybersecurity Center has launched the @cybershielduz_bot. Adding this bot to a group or channel protects users in that space from APK files sent there. If such malicious files appear, the bot automatically removes them.