Cybercriminals have begun posing as attentive neighbors in online chats to trick victims into downloading data-stealing malware, according to a warning from fraud prevention experts.
Galaktion Kuchava, an expert with the Moshelovka fraud prevention initiative, told news agency RIA Novosti that scammers are circulating malicious files disguised as security camera recordings.
The deceptive messages are structured as casual warnings regarding suspicious people allegedly spotted in building entrance halls or near apartment doors. Kuchava explained that the approach relies on an everyday tone without explicit threats or pressure, effectively mimicking legitimate community vigilance.
However, the attached file acts as the direct entry point for criminals. Kuchava warned that after downloading the file, the embedded malware requests elevated permissions to access the mobile phone and its camera. The expert advised users to refrain from opening files sent by strangers and to avoid clicking on unverified links.
Targeting local community chats
Community messaging groups in residential apartment buildings have become widespread channels for neighbors to discuss building maintenance and safety concerns. Security researchers observe that fraudsters exploit these platforms because residents usually maintain high trust toward messages framed as local security alerts. Granting malware access to a smartphone camera and system storage can allow remote attackers to spy on users, collect personal credentials, and compromise personal data.
Moshelovka functions as an online consumer protection platform in Russia designed to aggregate reports of digital scams and alert the public to emerging cyber threats. The findings were reported by RIA Novosti, a major Russian news agency based in Moscow.
School gradebook software scheme
The neighbor impersonation scheme comes shortly after specialists uncovered a separate cyber fraud campaign targeting parents ahead of Knowledge Day, which marks the start of the academic year in Russia on September 1.
According to experts, fraudsters developed fake versions of mobile applications designed for tracking school schedules and student grades. The malicious applications were subsequently distributed across parent chat groups, presented as necessary updates or new versions of official educational services.
Cybersecurity analysts recommend that users verify the identity of community members before opening shared media, download software exclusively from official application stores, and remain cautious of unexpected attachments in group chats.
