According to the Police Media Division, suspects had contacted individuals through WhatsApp, directing them to download a mobile application named “SriLankan.apk” via three fraudulent websites, srilankan.wuozgo.cc, srilankan.vaco.cc, and srilankan.krgo.cc.
Investigations revealed that the application functions as a banking trojan, allowing fraudsters to gain remote access to victims’ mobile phones and extract sensitive personal data.
Police stated that the scheme enables criminals to obtain One-Time Passwords (OTPs), bank account details, and biometric authentication data, including fingerprints and facial recognition. Using this information, they are able to access banking applications without authorization and transfer funds to other accounts.
The following telephone numbers have been linked to the operation: 077-4558361, 011-7771979, and 077-5791209.
Authorities further noted that many victims are lured by promises of instant financial benefits. The public has been strongly urged to remain cautious, avoid downloading applications from unverified sources, and refrain from sharing personal or banking information.
