SriLankan Airlines and Police Warn of Banking Trojan Scam Targeting Passengers

Both SriLankan Airlines and Sri Lanka Police have issued public warnings about a significant increase in scam activities targeting the airline's customers. Fraudsters are reportedly impersonating airline staff through WhatsApp messages and direct phone calls, directing individuals to install a malicious "SriLankan.apk" mobile application. This app, distributed via three identified fraudulent websites (srilankan.wuozgo.cc, srilankan.vaco.cc, and srilankan.krgo.cc), functions as a banking trojan, granting unauthorized remote access to mobile phones. The scheme aims to expose sensitive financial data such as one-time passwords (OTPs), banking PINs, and credit card information, enabling criminals to conduct fraudulent transactions. SriLankan Airlines has clarified that it does not contact customers via WhatsApp or make unsolicited calls for ticketing or promotional purposes.