The malicious app has been removed from the Windows Phone Store

Jan 17, 2014 09:52 GMT  ·  By

Over one thousand customers of Telfort, a subsidiary of Dutch telecoms company KPN, are said to have installed a rogue Windows Phone app that tricked them into handing over their My Telfort login credentials.

According to Dutch publication De Gelderlander, the app in question was hosted on the Windows Phone Store. The rogue application used the official Telfort logo to trick people into installing it.

The information harvested by the fake program was found to be publicly available on a website.

In a statement published after the incident, Telfort has revealed that access to the My Telfort website has been restricted for impacted customers until the issue is addressed. The company clarifies that the credentials haven’t been compromised due to a breach of its systems.

Microsoft has removed the malicious app from the Windows Phone Store. Telfort has launched an investigation into the issue, and it might take legal action against those who developed the fake application.