The fake app gets downloaded when a user downloads the app outside of their phone’s official application store, the Malaysia Computer Emergency Response Team (MyCERT) said via a Maybank posting on Facebook.

The most recent case involved an Android malware that could read all text messages on the phone, including TAC numbers, to perform internet banking transactions, it said.

“A number of fake websites, impersonating popular Malaysian cleaning services and pet stores have been created by fraudsters to scam victims by stealing their personal and banking details.

“We’d like to remind our customers to watch out for such scams, and stay vigilant,” MyCERT said.

MyCERT recommends that users do not click on suspicious links sent through SMS, WhatsApp or Messenger, and have an antivirus installed on their phones.