Thread by @logic

#KillerLoanApps - #Update - the fraudsters are *really* trying very hard to stay afloat.

Lets look at what #LoanBaba is doing.

First of all - @GooglePlay updated policy is humbug - play.google.com/store/apps/det… - They managed to get their app listed and got ~3 lakh installs

Their site loanbaba.top now has more information - a widget to calculate loan disbursement / repayment, E-Sign is prominently advertised and even NBFC license certificate of GOYAL Associates loanbaba.top/public/images/…

Next hop from there is the shell company / fintech partner website - Skyline Technology. skylinks.top

This website again tries really hard to make people believe they are real company.

skylinks.top/aboutUs.html

"There's something good about each day and celebrations like Women's day celebration, Ganesh Chaturthy Celebrations, Ethnic Day celebrations, Secret Santa during Christmas and also our Annual Day celebrations.

Random pictures from facebook / linkedin

Except - I am 100% sure, #1 Venugopalaswamy Layout, Ejjupra doesn't exist. Heck - anyone from Bangalore will know an address without Main and Cross in a layout is 90% fake.

cc @tam_arund who has been to Venugopalaswamy Layout.

But its not just that, the whitelabels now use Tencent Mobile Protect intl.cloud.tencent.com/product/mtp - So #MobSF will give 100/100 security score mobsf.cashlessconsumer.in/static_analyze… cc @ajinabraham

There are still *lot* of loopholes to see through the fake operations, but operators are getting closer to real. We need enforcement, surveillance won't be enough.

Oh btw, we now have a hosted MobSF mobsf.cashlessconsumer.in - Please be kind as its running on
@flydotio
free tier