Sri Lanka Police have uncovered a financial fraud racket involving fake websites and a malicious mobile application disguised as a service of SriLankan Airlines.
According to the Police Media Division, fraudsters contacted individuals via WhatsApp accounts, directing them to download a mobile app named SriLankan.apk through three fraudulent websites, srilankan.wuozgo.cc, srilankan.vaco.cc, and srilankan.krgo.cc.
Investigations revealed that the app functions as a banking trojan, granting remote access to mobile phones and exposing sensitive personal data.
Police said the scheme enables criminals to obtain One‑Time Passwords (OTPs), bank account details, and biometric authentication data such as fingerprints and facial recognition.
Using this information, they gain unauthorized access to banking apps and transfer funds fraudulently to other accounts.
The following telephone numbers have been linked to the operation: 077‑4558361, 011‑7771979, 074‑1142208, 077‑5791209, and 074‑3268200.
The Police have cautioned that many victims are lured by promises of instant financial benefits and urged the public not to fall prey to such scams. (Newswire)