Fake LMRA mobile-service app collects identity data and SMS

Documented campaign

How the approach works

Advertisements and texts lead to a fake app offering government services. It requests CPR and phone details followed by further identity fields, and forwards incoming SMS to its operator.

What they wanted

Collect identity data and SMS; financial motive inferred by researchers

Reported outcome

Technical collection behaviour documented. Financial losses not independently established.