LG Uplus announced on the 2nd that it directly visited customers concerned about voice phishing damage due to the installation of malicious apps in collaboration with the Seoul Metropolitan Police Agency.
LG Uplus visited the residence of a malicious app installer in Mapo District, Seoul, in collaboration with the Seoul Metropolitan Police Agency in February. The customer's smartphone had been compromised by a malicious app secretly installed by a voice phishing organization impersonating a card delivery service, resulting in the theft of all calls and messages. The customer was just about to transfer a large sum of money but was informed of the danger after moving to the police station, allowing for the deletion of the malicious app and prevention of damage, according to the company.
Currently, LG Uplus is operating its customer damage prevention analysis system to conduct real-time detection of control servers operated by voice phishing organizations.
The police, who receive detection results periodically, are visiting citizens suspected to be victims of malicious app installations after verification and analysis with the Financial Security Agency and others. When a malicious app is installed as intended by the voice phishing organization, functions such as calls and messages on the smartphone are 'intercepted,' prompting the police to meet the victims directly to prevent further damage.
LG Uplus went beyond merely providing information to the police by accompanying them on their field visit for the first time in the industry at the end of February. This was to identify new criminal methods and find effective ways to prevent customer damage. During the field visits conducted in areas such as Mapo District and Seodaemun District, they successfully detected and deleted malicious apps, achieving results in preventing customer damage.
The malicious app installers encountered at the scene were targeted by the recently frequent 'card delivery impersonation' voice phishing. When victims are alarmed by notifications of cards being delivered that they did not apply for, the voice phishing organization claims there seems to be an issue with their phone and induces victims to install a 'remote control app,' implanting the malicious app.
After seizing control of the smartphone, the voice phishing organization encourages victims to report directly to 112, 1301 (Prosecutor's Office), and 1332 (Financial Supervisory Service), but regardless of where the customer reports, the calls are intercepted by the criminal organization. However, victims believe they have called the police, prosecutors, or the Financial Supervisory Service, making them vulnerable to personal information leaks or financial damage.
Once LG Uplus's customer damage prevention system detects malicious app activity, the police conduct further analysis with relevant agencies, leading to a joint visit to LG Uplus and the suspected victims.
Based on the experiences gained during this field visit, LG Uplus plans to provide a 'malicious app suspicion alert' service that alerts users to danger without easy interception by voice phishing organizations. In cooperation with the Seoul Metropolitan Police Agency, LG Uplus also plans to enhance the voice phishing detection scenarios applied to the industry's first AI call agent 'ixi-O' last year.
Hong Kwan-hee, Chief Information Security Officer/Chief Privacy Officer at LG Uplus, noted, 'Through cooperation with the Seoul Metropolitan Police Agency, we have had the opportunity to encounter new methods and prepare countermeasures.' He added, 'We will strive to enhance the system that informs about voice phishing situations to continue providing a safe service experience for customers.'
Sim Moo-song, head of the phishing crime investigation team of the Seoul Metropolitan Police Agency's special investigation team, emphasized, 'There are cases where individuals mistakenly identify police as voice phishing organization members after being informed about the installation of malicious apps. If in doubt, visiting the nearest police station or precinct directly is the best method.' He also urged, 'Remember, in any case, neither the police nor the prosecutor's office will demand money.'