The Arrest and Mastermind

In a major breakthrough against organized cybercrime, the Surat City Cyber Crime Cell arrested an 18-year-old school dropout from Kanpur, Uttar Pradesh. Identified as Rohit Virendrasingh Shakya, the accused had allegedly become an expert coder by the age of 16. Despite dropping out after Class 11, he masterminded a sophisticated nationwide cyber fraud network. His primary modus operandi involved leveraging artificial intelligence (AI) tools and Telegram channels to develop highly convincing fake mobile applications that mimicked genuine banking and government services. This highlights the growing threat of AI in the hands of malicious actors, a sentiment echoed by several cyber security experts monitoring this case.

Fake Apps as a Service

Investigations revealed that the teenager operated on a 'malware-as-a-service' subscription model. He developed fake APK (Android Application Package) files for over 121 applications, which closely resembled legitimate apps such as SBI, PNB, and various government portals like RTO challan payments. These malicious apps were supplied to cybercriminal gangs, primarily operating out of Jamtara (Jharkhand), Haryana, and Rajasthan, for a monthly fee of ₹15,000. Unsuspecting users who downloaded these apps inadvertently compromised their devices, allowing fraudsters to remotely access OTPs and sensitive banking credentials in real time. The ease of distribution via WhatsApp further amplified the reach of this scam.

Scale of the Cyber Fraud

The scale of the operation was staggering. Digital forensic analysis showed that these malicious APKs were installed on more than 21,600 mobile phones across India. Investigators found that nearly 3,000 devices were completely compromised, facilitating over 54,000 fraudulent banking transactions. The total financial loss attributed to this network is estimated at a massive ₹64.38 crore. The case initially came to light when a Surat resident lost ₹5 lakh after downloading a fake 'PNB One' application received via WhatsApp. The victim's prompt reporting to the cyber helpline (1930) was crucial in uncovering the wider network.

Ongoing Investigation

Following the arrest, Surat Police seized mobile phones and laptops from the accused and launched a detailed forensic examination. Authorities are now probing whether additional cybercrime syndicates across the country were utilizing his software and if other developers were involved in the network. This case highlights the evolving threat landscape where young, self-taught coders are utilizing advanced technologies like AI to facilitate large-scale financial crimes, underscoring the need for heightened digital literacy and robust cybersecurity measures from both citizens and law enforcement agencies.