Mumbai Police Arrest Six Over ₹72 Crore Cyber Fraud Trail Linked to 255 Complaints and Mule Accounts
Mumbai's Mulund police arrested six people over a mule-account network that police link to 255 cyber fraud complaints worth about ₹72 crore. It began with a WhatsApp message impersonating a company owner.
Police in Mumbai's Mulund area have arrested six people over a network of bank accounts that they link to 255 cybercrime complaints across India. The frauds behind those complaints add up to about ₹72 crore, Deputy Commissioner of Police Abhay Singh Deshmukh told the Free Press Journal. That's the total in the complaints, not an amount proven against the six.
How it started
An accountant at a private company in Mulund was contacted on WhatsApp on 30 July by someone using the company owner's photograph, PTI reports, and was talked into transferring ₹10 lakh from the company's account.
Eleven bank accounts found on one suspect's phone were linked to 182 complaints registered across 21 states.
The mule network
The gang bought and sold bank accounts and SIM cards in Telegram groups, an official told PTI. Account holders were persuaded to install APK files on their phones, after which the gang used their accounts to receive victims' money.
From there, police say, the money was withdrawn in cash or converted into USDT and sent abroad. Police suspect links to a network run from China.
Four of the six are from Ghaziabad; the others are from Vadodara and Nellore, and they were arrested in Meerut, Ghaziabad, Vadodara and Kandivali. Police have recovered ₹5.5 lakh and seized five phones. The case was registered under sections 318(4) and 319(2) of the Bharatiya Nyaya Sanhita and sections 66C and 66D of the IT Act.
Mumbai police have warned people against installing APK files received from unknown persons.
More news
n0n Ransomware Lists ONE, Pelindo's ILCS and NCT Kandla Among 38 Maritime Firms; the Gang Uses an AI Coding Agent
The n0n ransomware group listed 38 maritime and logistics firms on 12 October, among them Singapore's ONE and Apical, Indonesia's ILCS Pelindo, Vietnam's Nam Dinh Vu Port and India's NCT Kandla. None has confirmed a breach.
Brotli Flaw CVE-2026-111497 Reaches WordPress Through Pingbacks: RCE Shown on One Docker Image, Fix Is the Server Library
An unauthenticated WordPress pingback can make the server decode attacker-supplied Brotli data, reaching CVE-2026-111497. Code execution is shown on one Docker image; the fix is a patched libbrotli, not a WordPress update.
Binance Proof of Reserves for 31 October Is Now Verifiable; Thai SEC Watches Exposure as Indodax Says It Closed a Security Gap
Binance has finished the zero-knowledge proof for its 31 October reserves snapshot and plans the next withdrawal phase for 3 November. In the region, Thailand's SEC is monitoring exposure and Indodax says it closed a security gap.