Digital Lutera Threatens India's UPI Security

Cyber intelligence firm CloudSEK has uncovered a sophisticated cybersecurity threat named 'Digital Lutera' that bypasses the SIM-binding security features of UPI apps. This toolkit, distributed and discussed in over 20 active Telegram groups, manipulates the Android at a system level, allowing fraudsters to intercept registration messages and OTPs. This enables them to register and control a victim's Unified Payments Interface account on a different device, even without the physical SIM card. CloudSEK reported transactions worth Rs 25-30 lakh processed in just two days within one group, highlighting the rapid scaling of this fraud. While the India===National Payments Corporation of India asserts that robust checks are in place, the incident raises concerns about the integrity of digital payments and the need for proactive mitigation measures.