Cybersecurity Experts Issue Urgent Warning Over Pikashow Streaming App
The rapid rise in popularity of Pikashow, a mobile application that provides free streaming of movies, web series, sports, and live television channels, has sparked significant cybersecurity alarms across India. Security professionals are cautioning that downloading and installing this app could potentially expose smartphones and tablets to dangerous malware, leading to the compromise of sensitive personal and financial information.
Shreshta IT Technologies Exposes Pakistan-Origin Malware Campaign
Leading the charge against this threat is India-based cybersecurity and threat intelligence firm, Shreshta IT Technologies Pvt Ltd. Under the leadership of Swapneel Patnekar, the company has conducted an in-depth analysis and has publicly urged all users to immediately uninstall the Pikashow application from their devices. The firm has made a serious allegation, stating that Pikashow is not merely an illicit streaming service but is actually a component of a coordinated campaign originating from Pakistan. This campaign is specifically designed to distribute malicious software and target unsuspecting Indian users.
The Dangers of Sideloading: Bypassing Security Protocols
A critical red flag is that Pikashow is conspicuously absent from the official Google Play Store. To acquire the app, users must download APK files from unverified third-party websites, a process commonly known as sideloading. Cybersecurity experts emphasize that this method deliberately bypasses the standard, rigorous security checks enforced by official app stores. This absence of vetting dramatically increases the likelihood of malware infections, spyware, and other harmful payloads being installed on the device alongside the app.
"The temptation of free content is undeniable, especially when legitimate OTT platform subscriptions can cost anywhere from Rs 149 to Rs 999 per month," explained Swapneel Patnekar in a statement to the media. "However, this very allure is what makes platforms like Pikashow so dangerous. Users are trading their digital security for free entertainment, exposing themselves to severe financial losses and data theft risks."
Coordinated Social Media Promotion and Legal Implications
The cybersecurity investigation has uncovered more than just the app itself. Shreshta IT Technologies has reported observing coordinated promotional activity on the social media platform X (formerly Twitter). A network of user accounts, allegedly created in late 2025, has been actively sharing download links and promoting Pikashow to expand its reach within the Indian user base. Beyond the immediate cybersecurity threats, experts also highlight the legal ramifications. Accessing pirated movies, series, and live sports through such applications is a direct violation of Indian copyright laws and can lead to potential legal consequences for users.
Essential Safety Measures for Users
In light of these findings, cybersecurity authorities are issuing clear and urgent guidelines for the public:
- Only download applications from verified and official platforms such as the Google Play Store for Android devices or the Apple App Store for iOS devices, where all apps undergo mandatory security screening.
- Users who have already installed Pikashow or any similar third-party streaming application are strongly advised to delete them immediately from their devices.
- As a precautionary measure, it is crucial to change all associated banking passwords, UPI PINs, and other financial credentials.
- Closely monitor bank accounts, credit card statements, and digital wallets for any unauthorized or suspicious transactions.
Individuals who believe they may have fallen victim to cyber fraud or suspect their device has been compromised are encouraged to report the incident immediately. They can contact the national cybercrime helpline at 1930 or file a report on the official portal at cybercrime.gov.in.
