Cyber Criminals on the Prowl: Defence Personnel easy prey?

80 Indians fall prey to cyber fraud every minute
Published: Monday, Sep 17, 2012, 9:00 IST
By Sunchika B Pandey | Place: Mumbai | Agency: DNA
If most of us have gone mobile, so have the cyber criminals. And like many of us, most of their time is being spent on the social networking sites. The cyber criminals are making a living out of it.
According to Norton Cybercrime Report 2012, 66% of Indian online adults have been a victim of cyber fraud in their lifetime. In the past 12 months, 56% of online adults in India have experienced cyber fraud.
As per the report, at least 1,15,000 people fall prey to cyber fraud every day, while 80 per minute and more than one per second leading to a rise in the average direct financial cost per victim to around Rs10,500.
According to the survey, the cybercriminals have now shifted their focus to the increasingly popular social platforms. One in three adults online Indians (32%) have been either social or mobile cybercrime victims.
While most internet users delete suspicious emails and are careful with their personal details online. However, 25% don’t use complex passwords or change their passwords frequently and 38% do not check for the padlock symbol in the browser before entering sensitive personal information.
Online adults are also unaware of the evolution of most common forms of cybercrime. In fact, 68% of adults do not know that malware can operate in a discreet fashion, making it hard to know if a computer has been compromised, and one third (35%) are not certain that their computer is currently clean and free of viruses.
“Malware and viruses used to wreak obvious havoc on your computer,” said Ibrahim. “You’d get a blue screen, or your computer would crash, alerting you to an infection. But cyber criminals have evolved new methods to avoid detection,” added Ibrahim.
80 Indians fall prey to cyber fraud every minute
Website Security
Website security indicators:click here

Cyber war: Indian Army gearing up

Times of India Jul 19, 2010, 04.19pm IST
NEW DELHI: The Indian Army is fighting attacks in the cyber world with electronic warfare capability of the "highest standard", say officials pointing out that virtual strikes have shot up from hostile quarters in both sophistication and frequency.

"The army is cognisant of the threat to its cyber space from various state and non-state actors. But our network is well secured in compliance with the highest standards of cyber security," a senior official in the military headquarters told IANS on condition of anonymity.

The official said the army has established an "impenetrable and secure wide area network exclusively for its functioning".

Officials in the 1.3 million force privately admit they are facing "next generation threats" and are rather worried over the complex world of cyber warfare amid reports of Chinese and Pakistani spies targeting the Indian military establishment via the internet.

Though attacks from hackers - professional or amateur - can come from anywhere in the world, cyber onslaughts have been more frequent from China and Pakistan, which have reportedly been peeking into India's sensitive business, diplomatic and strategic records.

As per reports from the cyber industry, China and Pakistan hackers steal nearly six million files worldwide every day.

A report in the US-based Defence Systems magazine found that there were 25 million new strains of malware created in 2009. That equals a new strain of malware every 0.79 seconds. The report underlines how the current cyber threat environment is dramatically changing and becoming more challenging as the clock ticks.

Howevever, the Indian army is confident.

Revealing that secret information had been secured with unhackable electronic passwords, the official said various "cryptographic controls" have been incorporated in the wake of a significant number of viruses, worms and other forms of malware.

To address cyber defence, which is also under threat from terrorist outfits that have their own trained recruits, officials said the army frequently upgrades its comprehensive cyber security policy to pro-actively deal with and anticipate these threats.

The force has established the Computer Emergency Response Team (CERT) to respond to attacks targeting the army's critical systems and infrastructure.

Another official said the army has its own cyber audit process conducted by cyber security personnel.

"The audit is conducted in accordance with established security standards such as ISO 27001. Audit of the network is a continuous and active process which helps identification and mitigation of vulnerabilities in a network to counter latest threats as also check the network for cyber security policy compliance," he said.

However, the official admitted there was no room for complacency in times of rapid technological change.

"In the area of cyber space, the battle between hackers and defenders is an ongoing process, influenced by latest technological developments. Due to the dynamic nature of threats, the army is constantly upgrading its network," he said.

Technology alone, however, cannot guarantee "fool-proof security", he said, adding the "Indian Army therefore emphasises on the people and the process to achieve compliance of best practices in this field".

"Regular training programmes are being conducted to enhance user awareness and counter threats like social engineering and phishing," he said.
Cyber war: Indian Army gearing up

National Security: Army Major's computer was accessed from Pakistan

14/06/2010
New Delhi: Security agencies probing the role of an Andaman- based Army Major have claimed to have found that his computer and emails had been remotely accessed from a server located in Pakistan, a finding that has come as a jolt for them.

The probe also indicated that the National Investigating Agency and Military Intelligence officials had neglected the case property--the computer of the Army Major--and certain files and mails were deleted when the machine was in their custody, official sources said.

During the probe, it was also found that the computer of the army officer had been accessed many a time from a proxy server based in Pakistan and one more country, the location of which was being examined.

It seemed the other server could also be from Pakistan but the proxy server addresses had been hopped through various Internet gateways of European countries.

The Army major, who is being investigated by various security agencies, came under the scanner when his email address was picked up while scanning the emails of US-born terror accused David Headley.

The US agencies informed the Indian security agencies about the email address and the Army major, who was likely to be booked under Official Secrets Act by the NIA, was put under the scanner.

The probe so far has indicated that the official had violated OSA as nearly 2,500 defence presentations were found on his computer. These documents related to issues much beyond his sphere of work.

The computer is currently with the Central Forensic Sciences Laboratory (CFSL) in Hyderabad. Earlier, the Major had said he was an inquisitive person but he was himself at a loss to know how some files had entered his computer. The forensic report of the seized computer clearly shows that there were over 2,500 presentations, some of which were secret and even top secret, the sources said.

In a related development, the forensic report said that some files and emails were deleted from the computer on a particular date after it was seized by authorities, pressing panic buttons among the agencies.
Source: Agencies
Army Major's computer was accessed from Pakistan
Related Story
Indian Military restricts social networking sites

Beware! Phising, Spamming, Spoofing and Virus attacks

Tuesday, October 06, 2009
No mails for refunds issued from income tax department
18:14 IST
Information has been received from several quarters that people are receiving electronic mails informing them of their income-tax refunds and seeking their credit card details. The e-mail is sent from the following or similar mailing addresses: ihxbkw@accounts.net or cvhfus@accounts.net

It is clarified that the Income Tax Department does not send e-mails regarding refunds and does not seek any information regarding credit cards of taxpayers. Taxpayers are, therefore, cautioned that they should not respond to such mails and if they do so it would be at their risk and responsibility.

BSC/BY-348/09
No mails for refunds issued from income tax department

This spam is just for you!

Spam Mail
SAN FRANCISCO: Yes, guys, those spam e-mails for Viagra or baldness cream just might be directed to you personally. So, too, are many of the other crafty come-ons clogging inboxes, trying to lure us to fake websites so criminals can steal our personal information.

A new study by Cisco Systems Inc found an alarming increase in the amount of personalized spam, which online identity thieves create using stolen lists of e-mail addresses or other poached data about their victims, such as where they went to school or which bank they use.

Unlike traditional spam, most of which is blocked by e-mail filters, personalised spam, known as "spear phishing" messages, often sail through unmolested. They're sent in smaller chunks, and often come from accounts the criminals have set up at reputable Web-based e-mail services. Some of the messages are expertly crafted, linking to beautifully designed websites that are bogus or immediately install malicious programmes.

Cisco's annual security study found that spam is growing quickly -- nearly 200 billion spam messages are now sent each day, double the volume in 2007 -- and that targeted attacks are also rising sharply.

More than 0.4 per cent of all spam sent in September were targeted attacks, Cisco found. That might sound low, but since 90 per cent of all e-mails sent worldwide are spam, this means 800 million messages a day are attempts are spear phishing. A year ago, targeted attacks with personalized messages were less than 0.1 per cent of all spam.

The latest attacks include text-message spam, e-mails trying to trick business owners into coughing up credentials for their Google advertising accounts, or personalized "whaling" e-mails to executives claiming that their businesses are under investigation or that there's a problem with their personal bank account.
More: This spam is just for you!