A cyber cell official says the fraud starts with SMS alerts and shifts to WhatsApp, where victims receive a malicious APK file disguised as a gas bill update that, once installed, enables data theft