Night Play, Vimo and Other Malicious Apps Can Hack Your Phone; J&K Police Issue Warning
The Jammu and Kashmir Police have warned against malicious Android apps (Night Play, Vimo, etc.) promoted via social media ads. These APKs request Accessibility permissions, allowing attackers to steal data and execute unauthorised financial transactions. Report cybercrime at 1930. Scroll below to know more.
Jammu and Kashmir Police on Tuesday, September 1, warned residents against malicious Android apps operating under names such as "Night Play", "Vimo", "Reloop", "Kyss", "Rivo", "Nexo" and "Vixa", saying these can take control of phones and enable unauthorised financial transactions. The official account of Jammu and Kashmir Police shared the alert, which aligns with a recent advisory from the National Cybercrime Threat Analytics Unit under the Ministry of Home Affairs’ Indian Cyber Crime Coordination Centre (I4C).
The warning notes that these apps, along with similar variants, may redirect users to websites that prompt them to download APK files from outside official app stores. Fake Adult and Dating Apps: I4C Identifies Malware Campaign Targeting Android Users.
List of Dangerous Apps Warned by Jammu and Kashmir Police
How the Apps Operate
The apps are primarily promoted through advertisements on platforms such as Facebook and Instagram. Clicking these ads often leads users to websites offering adult content, where they are encouraged to install an APK file not available on the Google Play Store. Once installed, the applications frequently request sensitive permissions, particularly Accessibility access. If granted, this can allow the malware to read information on the screen, interact with the device, capture one-time passwords or PINs, and potentially initiate or confirm financial transactions without the user’s knowledge.
Some variants may also install additional packages under the guise of updates or set up a VPN that routes traffic through attacker-controlled servers. In certain cases, the apps can make themselves difficult to uninstall through standard device settings.
Official Advice and Reporting
The Jammu and Kashmir Police and the central advisory both urge users to download applications only from the Google Play Store or other trusted sources. They advise against installing APK files received through advertisements, websites or suspicious links, and recommend carefully reviewing any permission requests, especially those involving Accessibility services. Anyone who believes they have been affected by cybercrime is advised to call the national helpline 1930 or report the incident on the official portal cybercrime.gov.in. New Scam Alert! Fake 'RTO Challan APK' File Used To Hack WhatsApp, Steal Sensitive Information; Here's Where You Should Check Vehicle Challan Online.
The advisory reflects a broader pattern of financial frauds linked to malicious Android applications that exploit curiosity around adult content. Authorities continue to stress basic digital hygiene, including keeping Google Play Protect enabled, regularly reviewing installed apps, and maintaining updated device software.
(The above story first appeared on LatestLY on Sep 01, 2026 06:51 PM IST. For more news and updates on politics, world, sports, entertainment and lifestyle, log on to our website latestly.com).