Indian authorities target over 50 Firebase-hosted sites involved in phishing, malware, and financial scams, highlighting a rising trend of cybercriminals leveraging trusted cloud services for illicit activities.
India’s move against dozens of websites and databases hosted on Google’s Firebase platform has drawn fresh attention to a growing fraud tactic: using legitimate cloud tools to run scams. According to notices cited by Indian media, the Indian Cyber Crime Coordination Centre identified at least 57 Firebase-hosted sites and databases that were allegedly being used for phishing, malware distribution and financial fraud.
Firebase is a Google cloud platform that developers use to host websites, store data and manage app functions without building everything from scratch. That legitimate purpose is precisely why it has become attractive to criminals, who can make fake pages and backend systems look less suspicious than infrastructure created openly for fraud. Indian authorities said some of the sites appeared to imitate major banks, including State Bank of India, ICICI Bank and Axis Bank, while others were set up to capture sensitive information from victims’ phones, such as card details and one-time passwords.
Business Standard reported that some of the impersonation schemes also used promises of reward-point redemptions and credit card limit upgrades to lure users into handing over information. In another pattern described by Indian media, victims were directed to download Android apps from fake websites advertising help with PM-KISAN payments; the apps were then alleged to have collected data from the device and sent it to Firebase-controlled databases.
Security researchers have seen similar abuse elsewhere. Reports from security firms and researchers in recent months have described phishing operations that used Firebase-hosted pages and storage links to harvest credentials, sometimes rotating through new projects to stay ahead of takedowns. The broader lesson, according to those warnings, is that cybercriminals are increasingly relying on trusted cloud services to lend their scams an air of legitimacy.
Disclaimer: This article is intended to inform and educate, not to recommend or endorse any financial product, investment or strategy. Please consider your own financial circumstances and seek professional advice where appropriate before making financial decisions.
