IRCTC warns its customers of malicious Android application hosted on a phishing website

IRCTC has sent email to tens of millions of its customers warning them of a malicious Android application (irctcconnect.apk) hosted on a phishing website (https://irctc.creditmobile.site) which is being circulated over instant messaging platforms like WhatsApp, Telegram, and others.

The email from IRCTC warns that this android app (APK file) is malicious and infects the mobile device. The cyber criminals who are behind this fraudulent app are sending phishing links at mass level and insisting users to download this android application.

They are impersonating IRCTC officials to trick victims into revealing their sensitive net banking credentials like UPI details, credit and debit card information etc.

IRCTC advises its customers that to keep safe from such cyber criminals, they should not download this application. Those who want to use IRCTC services should download the authorised app “IRCTC Rail Connect,” available at Google Play Store and Apple Store.

Indian Railway Catering and Tourism Corporation (IRCTC), a Miniratna public corporation, is the only business entity in India that is authorised to provide certain services to the Indian Railways, including online ticketing, catering, and selling drinking water on trains and at railway stations.