{"id":3519,"date":"2022-09-30T15:36:10","date_gmt":"2022-09-30T15:36:10","guid":{"rendered":"https:\/\/shreshtait.com\/blog\/?p=3519"},"modified":"2025-09-30T11:02:18","modified_gmt":"2025-09-30T05:32:18","slug":"phishing-website-android-app-targeting-hdfc-bank-customers","status":"publish","type":"post","link":"https:\/\/shreshtait.com\/blog\/2022\/09\/phishing-website-android-app-targeting-hdfc-bank-customers\/","title":{"rendered":"Phishing targeting HDFC Bank customers"},"content":{"rendered":"\n<p>Threat researchers at <a href=\"https:\/\/shreshtait.com\" target=\"_blank\" rel=\"noreferrer noopener\">Shreshta<\/a>, have identified a phishing website and Android app targeting HDFC Bank customers.<\/p>\n\n\n\n<p><strong>About HDFC Bank Limited <\/strong><\/p>\n\n\n\n<p>HDFC Bank Limited is an Indian banking and financial services company headquartered in Mumbai. It is India&#8217;s largest private sector bank by assets and world&#8217;s 10th largest bank by market capitalisation as of April 2021. It is the third largest company by market capitalisation of $122.50 billion on the Indian stock exchanges. It is also the fifteenth largest employer in India with nearly 150,000 employees <sup><a href=\"https:\/\/en.wikipedia.org\/wiki\/HDFC_Bank\" target=\"_blank\" rel=\"noreferrer noopener\">1<\/a><\/sup><\/p>\n\n\n\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"650\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot-2022-09-30-at-7.45.15-AM-1024x650.png\" alt=\"Phishing website HDFC Bank https:\/\/hdfcrewwaards[.]in\" class=\"wp-image-3534\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot-2022-09-30-at-7.45.15-AM-1024x650.png 1024w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot-2022-09-30-at-7.45.15-AM-300x190.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot-2022-09-30-at-7.45.15-AM-768x487.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot-2022-09-30-at-7.45.15-AM-1536x975.png 1536w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot-2022-09-30-at-7.45.15-AM-2048x1299.png 2048w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot-2022-09-30-at-7.45.15-AM-1320x838.png 1320w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">                                                                                       Image &#8211;  Phishing website https:\/\/hdfcrewwaards[.]in<\/figcaption><\/figure>\n\n\n\n<p><strong>Modus Operandi (MO) <\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Attackers are sending phishing website link to users via SMS &amp; Whatsapp.<\/li>\n\n\n\n<li>The phishing website lures the users to click on the link with an intriguing message &#8220;Congratulations Your Card has Been Approved&#8221;<\/li>\n\n\n\n<li>Clicking on the download link downloads the file hdfc-points.apk (An Android application)<\/li>\n\n\n\n<li>The user opens the file hdfc-points.apk, which starts the app installation<\/li>\n\n\n\n<li>Android OS depending on configuration and settings, prompts the user to cancel or access settings to allow installation from unknown apps<\/li>\n\n\n\n<li>Once the user enables &#8220;Allow from this source&#8221;, the app is successfully installed<\/li>\n\n\n\n<li>The user opens the installed app, which prompts the user to allow Notification access<\/li>\n\n\n\n<li>Once the notification access has been granted, the app loads and displays a form, asking the user to enter Personal Identifiable Information (PII), including card details, CVV etc.<\/li>\n<\/ul>\n\n\n\n<p><strong>Motive <\/strong>&#8211; Financial fraud <\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"576\" height=\"1024\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_20220930-171628-576x1024.png\" alt=\"Phishing website of HDFC Bank Credit card.\" class=\"wp-image-3568\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_20220930-171628-576x1024.png 576w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_20220930-171628-169x300.png 169w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_20220930-171628.png 720w\" sizes=\"auto, (max-width: 576px) 100vw, 576px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"576\" height=\"1024\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_20220930-171621-576x1024.png\" alt=\"Phishing website of HDFC Bank Credit card.\" class=\"wp-image-3571\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_20220930-171621-576x1024.png 576w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_20220930-171621-169x300.png 169w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_20220930-171621.png 720w\" sizes=\"auto, (max-width: 576px) 100vw, 576px\" \/><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"576\" height=\"1024\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_20220930-171705-576x1024.png\" alt=\"Mobile screen showing option to install app from unknown sources.\" class=\"wp-image-3576\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_20220930-171705-576x1024.png 576w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_20220930-171705-169x300.png 169w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_20220930-171705.png 720w\" sizes=\"auto, (max-width: 576px) 100vw, 576px\" \/><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"576\" height=\"1024\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_20220930-171721-576x1024.png\" alt=\"Fake HDFC Bank credit card installation screen on android\" class=\"wp-image-3579\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_20220930-171721-576x1024.png 576w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_20220930-171721-169x300.png 169w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_20220930-171721.png 720w\" sizes=\"auto, (max-width: 576px) 100vw, 576px\" \/><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"576\" height=\"1024\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_20220930-171743-576x1024.png\" alt=\"Fake HDFC Bank credit card installation screen on android\" class=\"wp-image-3581\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_20220930-171743-576x1024.png 576w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_20220930-171743-169x300.png 169w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_20220930-171743.png 720w\" sizes=\"auto, (max-width: 576px) 100vw, 576px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"576\" height=\"1024\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_20220930-171757-576x1024.png\" alt=\"Fake HDFC Bank credit card requesting permissions on android.\" class=\"wp-image-3583\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_20220930-171757-576x1024.png 576w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_20220930-171757-169x300.png 169w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_20220930-171757.png 720w\" sizes=\"auto, (max-width: 576px) 100vw, 576px\" \/><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"576\" height=\"1024\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_2022-09-30-18-03-17-634_com.app_.manager.hdfc_-576x1024.png\" alt=\"Fake HDFC Bank credit card asking the user to enter their personal information\" class=\"wp-image-3586\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_2022-09-30-18-03-17-634_com.app_.manager.hdfc_-576x1024.png 576w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_2022-09-30-18-03-17-634_com.app_.manager.hdfc_-169x300.png 169w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_2022-09-30-18-03-17-634_com.app_.manager.hdfc_-768x1365.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_2022-09-30-18-03-17-634_com.app_.manager.hdfc_-864x1536.png 864w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_2022-09-30-18-03-17-634_com.app_.manager.hdfc_.png 1080w\" sizes=\"auto, (max-width: 576px) 100vw, 576px\" \/><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"576\" height=\"1024\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_2022-09-30-18-09-53-065_com.app_.manager.hdfc_-576x1024.png\" alt=\"Fake HDFC Bank credit card asking the user to enter their personal information\" class=\"wp-image-3589\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_2022-09-30-18-09-53-065_com.app_.manager.hdfc_-576x1024.png 576w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_2022-09-30-18-09-53-065_com.app_.manager.hdfc_-169x300.png 169w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_2022-09-30-18-09-53-065_com.app_.manager.hdfc_-768x1365.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_2022-09-30-18-09-53-065_com.app_.manager.hdfc_-864x1536.png 864w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot_2022-09-30-18-09-53-065_com.app_.manager.hdfc_.png 1080w\" sizes=\"auto, (max-width: 576px) 100vw, 576px\" \/><\/figure>\n\n\n\n<p><strong>Threat Indicators Summary<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>hdfcrewwaards[.]in has been created on 2022-09-29<br>Domain name registrar &#8211; Endurance Digital Domain Technology LLP<\/li>\n\n\n\n<li>hdfcrewwaards[.]in resolves to 119.18.54.110<\/li>\n\n\n\n<li>119.18.54.110 belongs to AS394695<\/li>\n\n\n\n<li>hdfc-points.apk &#8211; sha256 hash : dd9a950964ea2f8359f7d2c6733c1a1ffcb60c5e2d028ba1f5977bd3500fdcd2<\/li>\n<\/ul>\n\n\n\n<p><\/p>\n\n\n\n<p>Neither the hash of the APK nor the domain name hdfcrewwaards[.]in provides any security insights on VirusTotal. <\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"650\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot-2022-09-30-at-8.18.42-PM-1024x650.png\" alt=\"Hash of phishing android app hdfc-points.apk on VirusTotal showing as clean\" class=\"wp-image-3594\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot-2022-09-30-at-8.18.42-PM-1024x650.png 1024w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot-2022-09-30-at-8.18.42-PM-300x190.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot-2022-09-30-at-8.18.42-PM-768x487.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot-2022-09-30-at-8.18.42-PM-1536x975.png 1536w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot-2022-09-30-at-8.18.42-PM-2048x1299.png 2048w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot-2022-09-30-at-8.18.42-PM-1320x838.png 1320w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"650\" src=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot-2022-09-30-at-8.20.35-PM-1024x650.png\" alt=\"Search of phishing website hdfcrewwaards.in on VirusTotal showing as clean\" class=\"wp-image-3597\" srcset=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot-2022-09-30-at-8.20.35-PM-1024x650.png 1024w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot-2022-09-30-at-8.20.35-PM-300x190.png 300w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot-2022-09-30-at-8.20.35-PM-768x487.png 768w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot-2022-09-30-at-8.20.35-PM-1536x975.png 1536w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot-2022-09-30-at-8.20.35-PM-2048x1299.png 2048w, https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot-2022-09-30-at-8.20.35-PM-1320x838.png 1320w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>At the time of writing this, our threat researchers are continuously monitoring and mapping infrastructure, phishing websites and malicious domain names of the attacker.<\/p>\n\n\n\n<p>While phishing websites targeting banks are pretty standard, the attacker&#8217;s method of building a phishing website &amp; Android app targeting HDFC Bank customers is certainly a novel one we&#8217;ve observed.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Threat researchers at Shreshta, have identified a phishing website and Android app targeting HDFC Bank customers. About HDFC Bank Limited HDFC Bank Limited is an Indian banking and financial services company headquartered in Mumbai. It is India&#8217;s largest private sector bank by assets and world&#8217;s 10th largest bank by market capitalisation as of April 2021. [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[14,42],"tags":[],"class_list":["post-3519","post","type-post","status-publish","format-standard","hentry","category-information-security","category-threat-intelligence"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.0 (Yoast SEO v27.4) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>DNS Security &amp; Threat Intelligence Blog | Shreshta<\/title>\n<meta name=\"description\" content=\"Security researchers at Shreshta IT, using SDINET, have identified a phishing website and Android app targeting HDFC Bank customers.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/shreshtait.com\/blog\/2022\/09\/phishing-website-android-app-targeting-hdfc-bank-customers\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Phishing targeting HDFC Bank customers\" \/>\n<meta property=\"og:description\" content=\"Security researchers at Shreshta IT, using SDINET, have identified a phishing website and Android app targeting HDFC Bank customers.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/shreshtait.com\/blog\/2022\/09\/phishing-website-android-app-targeting-hdfc-bank-customers\/\" \/>\n<meta property=\"og:site_name\" content=\"DNS Security &amp; Threat Intelligence Blog | Shreshta\" \/>\n<meta property=\"article:published_time\" content=\"2022-09-30T15:36:10+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-09-30T05:32:18+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot-2022-09-30-at-7.45.15-AM.png\" \/>\n\t<meta property=\"og:image:width\" content=\"3584\" \/>\n\t<meta property=\"og:image:height\" content=\"2274\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Swapneel Patnekar\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@shreshtait\" \/>\n<meta name=\"twitter:site\" content=\"@shreshtait\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Swapneel Patnekar\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2022\\\/09\\\/phishing-website-android-app-targeting-hdfc-bank-customers\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2022\\\/09\\\/phishing-website-android-app-targeting-hdfc-bank-customers\\\/\"},\"author\":{\"name\":\"Swapneel Patnekar\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#\\\/schema\\\/person\\\/9193d733c00e1d16e59261d57c852484\"},\"headline\":\"Phishing targeting HDFC Bank customers\",\"datePublished\":\"2022-09-30T15:36:10+00:00\",\"dateModified\":\"2025-09-30T05:32:18+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2022\\\/09\\\/phishing-website-android-app-targeting-hdfc-bank-customers\\\/\"},\"wordCount\":360,\"publisher\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2022\\\/09\\\/phishing-website-android-app-targeting-hdfc-bank-customers\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/wp-content\\\/uploads\\\/2022\\\/09\\\/Screenshot-2022-09-30-at-7.45.15-AM-1024x650.png\",\"articleSection\":[\"Information Security\",\"Threat Intelligence\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2022\\\/09\\\/phishing-website-android-app-targeting-hdfc-bank-customers\\\/\",\"url\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2022\\\/09\\\/phishing-website-android-app-targeting-hdfc-bank-customers\\\/\",\"name\":\"\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2022\\\/09\\\/phishing-website-android-app-targeting-hdfc-bank-customers\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2022\\\/09\\\/phishing-website-android-app-targeting-hdfc-bank-customers\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/wp-content\\\/uploads\\\/2022\\\/09\\\/Screenshot-2022-09-30-at-7.45.15-AM-1024x650.png\",\"datePublished\":\"2022-09-30T15:36:10+00:00\",\"dateModified\":\"2025-09-30T05:32:18+00:00\",\"description\":\"Security researchers at Shreshta IT, using SDINET, have identified a phishing website and Android app targeting HDFC Bank customers.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2022\\\/09\\\/phishing-website-android-app-targeting-hdfc-bank-customers\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2022\\\/09\\\/phishing-website-android-app-targeting-hdfc-bank-customers\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2022\\\/09\\\/phishing-website-android-app-targeting-hdfc-bank-customers\\\/#primaryimage\",\"url\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/wp-content\\\/uploads\\\/2022\\\/09\\\/Screenshot-2022-09-30-at-7.45.15-AM.png\",\"contentUrl\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/wp-content\\\/uploads\\\/2022\\\/09\\\/Screenshot-2022-09-30-at-7.45.15-AM.png\",\"width\":3584,\"height\":2274},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/2022\\\/09\\\/phishing-website-android-app-targeting-hdfc-bank-customers\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Phishing targeting HDFC Bank customers\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/\",\"name\":\"DNS Security &amp; Threat Intelligence Blog | Shreshta\",\"description\":\"DNS Security &amp; Threat Intelligence\",\"publisher\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#organization\",\"name\":\"Shreshta IT Technologies Pvt. Ltd.\",\"alternateName\":\"Shreshta\",\"url\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Shreshta.svg\",\"contentUrl\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Shreshta.svg\",\"width\":330,\"height\":76,\"caption\":\"Shreshta IT Technologies Pvt. Ltd.\"},\"image\":{\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/shreshtait\",\"https:\\\/\\\/infosec.exchange\\\/@shreshta\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/shreshta\\\/\"],\"description\":\"DNS security and threat intelligence company providing real-time threat protection for organizations worldwide. Our solutions include DNS Shield (Protective DNS), DNS Watchtower (Passive DNS), and comprehensive threat intelligence feeds. Trusted by enterprises to detect, prevent, and investigate cyber threats at the DNS layer.\",\"email\":\"sales@shreshtait.com\",\"legalName\":\"Shreshta IT Technologies Pvt. Ltd.\",\"foundingDate\":\"2014-01-22\",\"numberOfEmployees\":{\"@type\":\"QuantitativeValue\",\"minValue\":\"11\",\"maxValue\":\"50\"},\"publishingPrinciples\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/blog\\\/\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/#\\\/schema\\\/person\\\/9193d733c00e1d16e59261d57c852484\",\"name\":\"Swapneel Patnekar\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b8a02ca124e85d2be9710cbbca4d5e3abdaeac895af98732bc4b2bd953879e78?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b8a02ca124e85d2be9710cbbca4d5e3abdaeac895af98732bc4b2bd953879e78?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/b8a02ca124e85d2be9710cbbca4d5e3abdaeac895af98732bc4b2bd953879e78?s=96&d=mm&r=g\",\"caption\":\"Swapneel Patnekar\"},\"sameAs\":[\"https:\\\/\\\/shreshtait.com\\\/blog\"],\"url\":\"https:\\\/\\\/shreshtait.com\\\/blog\\\/author\\\/pswapneel\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"DNS Security &amp; Threat Intelligence Blog | Shreshta","description":"Security researchers at Shreshta IT, using SDINET, have identified a phishing website and Android app targeting HDFC Bank customers.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/shreshtait.com\/blog\/2022\/09\/phishing-website-android-app-targeting-hdfc-bank-customers\/","og_locale":"en_US","og_type":"article","og_title":"Phishing targeting HDFC Bank customers","og_description":"Security researchers at Shreshta IT, using SDINET, have identified a phishing website and Android app targeting HDFC Bank customers.","og_url":"https:\/\/shreshtait.com\/blog\/2022\/09\/phishing-website-android-app-targeting-hdfc-bank-customers\/","og_site_name":"DNS Security &amp; Threat Intelligence Blog | Shreshta","article_published_time":"2022-09-30T15:36:10+00:00","article_modified_time":"2025-09-30T05:32:18+00:00","og_image":[{"width":3584,"height":2274,"url":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot-2022-09-30-at-7.45.15-AM.png","type":"image\/png"}],"author":"Swapneel Patnekar","twitter_card":"summary_large_image","twitter_creator":"@shreshtait","twitter_site":"@shreshtait","twitter_misc":{"Written by":"Swapneel Patnekar","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/shreshtait.com\/blog\/2022\/09\/phishing-website-android-app-targeting-hdfc-bank-customers\/#article","isPartOf":{"@id":"https:\/\/shreshtait.com\/blog\/2022\/09\/phishing-website-android-app-targeting-hdfc-bank-customers\/"},"author":{"name":"Swapneel Patnekar","@id":"https:\/\/shreshtait.com\/blog\/#\/schema\/person\/9193d733c00e1d16e59261d57c852484"},"headline":"Phishing targeting HDFC Bank customers","datePublished":"2022-09-30T15:36:10+00:00","dateModified":"2025-09-30T05:32:18+00:00","mainEntityOfPage":{"@id":"https:\/\/shreshtait.com\/blog\/2022\/09\/phishing-website-android-app-targeting-hdfc-bank-customers\/"},"wordCount":360,"publisher":{"@id":"https:\/\/shreshtait.com\/blog\/#organization"},"image":{"@id":"https:\/\/shreshtait.com\/blog\/2022\/09\/phishing-website-android-app-targeting-hdfc-bank-customers\/#primaryimage"},"thumbnailUrl":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot-2022-09-30-at-7.45.15-AM-1024x650.png","articleSection":["Information Security","Threat Intelligence"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/shreshtait.com\/blog\/2022\/09\/phishing-website-android-app-targeting-hdfc-bank-customers\/","url":"https:\/\/shreshtait.com\/blog\/2022\/09\/phishing-website-android-app-targeting-hdfc-bank-customers\/","name":"","isPartOf":{"@id":"https:\/\/shreshtait.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/shreshtait.com\/blog\/2022\/09\/phishing-website-android-app-targeting-hdfc-bank-customers\/#primaryimage"},"image":{"@id":"https:\/\/shreshtait.com\/blog\/2022\/09\/phishing-website-android-app-targeting-hdfc-bank-customers\/#primaryimage"},"thumbnailUrl":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot-2022-09-30-at-7.45.15-AM-1024x650.png","datePublished":"2022-09-30T15:36:10+00:00","dateModified":"2025-09-30T05:32:18+00:00","description":"Security researchers at Shreshta IT, using SDINET, have identified a phishing website and Android app targeting HDFC Bank customers.","breadcrumb":{"@id":"https:\/\/shreshtait.com\/blog\/2022\/09\/phishing-website-android-app-targeting-hdfc-bank-customers\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/shreshtait.com\/blog\/2022\/09\/phishing-website-android-app-targeting-hdfc-bank-customers\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/shreshtait.com\/blog\/2022\/09\/phishing-website-android-app-targeting-hdfc-bank-customers\/#primaryimage","url":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot-2022-09-30-at-7.45.15-AM.png","contentUrl":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2022\/09\/Screenshot-2022-09-30-at-7.45.15-AM.png","width":3584,"height":2274},{"@type":"BreadcrumbList","@id":"https:\/\/shreshtait.com\/blog\/2022\/09\/phishing-website-android-app-targeting-hdfc-bank-customers\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/shreshtait.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Phishing targeting HDFC Bank customers"}]},{"@type":"WebSite","@id":"https:\/\/shreshtait.com\/blog\/#website","url":"https:\/\/shreshtait.com\/blog\/","name":"DNS Security &amp; Threat Intelligence Blog | Shreshta","description":"DNS Security &amp; Threat Intelligence","publisher":{"@id":"https:\/\/shreshtait.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/shreshtait.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/shreshtait.com\/blog\/#organization","name":"Shreshta IT Technologies Pvt. Ltd.","alternateName":"Shreshta","url":"https:\/\/shreshtait.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/shreshtait.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/03\/Shreshta.svg","contentUrl":"https:\/\/shreshtait.com\/blog\/wp-content\/uploads\/2023\/03\/Shreshta.svg","width":330,"height":76,"caption":"Shreshta IT Technologies Pvt. Ltd."},"image":{"@id":"https:\/\/shreshtait.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/shreshtait","https:\/\/infosec.exchange\/@shreshta","https:\/\/www.linkedin.com\/company\/shreshta\/"],"description":"DNS security and threat intelligence company providing real-time threat protection for organizations worldwide. Our solutions include DNS Shield (Protective DNS), DNS Watchtower (Passive DNS), and comprehensive threat intelligence feeds. Trusted by enterprises to detect, prevent, and investigate cyber threats at the DNS layer.","email":"sales@shreshtait.com","legalName":"Shreshta IT Technologies Pvt. Ltd.","foundingDate":"2014-01-22","numberOfEmployees":{"@type":"QuantitativeValue","minValue":"11","maxValue":"50"},"publishingPrinciples":"https:\/\/shreshtait.com\/blog\/blog\/"},{"@type":"Person","@id":"https:\/\/shreshtait.com\/blog\/#\/schema\/person\/9193d733c00e1d16e59261d57c852484","name":"Swapneel Patnekar","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/b8a02ca124e85d2be9710cbbca4d5e3abdaeac895af98732bc4b2bd953879e78?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/b8a02ca124e85d2be9710cbbca4d5e3abdaeac895af98732bc4b2bd953879e78?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/b8a02ca124e85d2be9710cbbca4d5e3abdaeac895af98732bc4b2bd953879e78?s=96&d=mm&r=g","caption":"Swapneel Patnekar"},"sameAs":["https:\/\/shreshtait.com\/blog"],"url":"https:\/\/shreshtait.com\/blog\/author\/pswapneel\/"}]}},"_links":{"self":[{"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/posts\/3519","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/comments?post=3519"}],"version-history":[{"count":116,"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/posts\/3519\/revisions"}],"predecessor-version":[{"id":7856,"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/posts\/3519\/revisions\/7856"}],"wp:attachment":[{"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/media?parent=3519"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/categories?post=3519"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/shreshtait.com\/blog\/wp-json\/wp\/v2\/tags?post=3519"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}