: Some versions are designed to trick users into entering their real BCP bank credentials , phone numbers, and PINs, allowing hackers to drain the victim's actual accounts.