<div class='adtext'>advertisement</div><div class='ad-300X250'><div id='div-gpt-ad-1653892544834-0'><script>googletag.cmd.push(function() { googletag.display('div-gpt-ad-1653892544834-0'); });</script></div></div>

Web3

Cybersecurity

<p>In the evolving landscape of cybersecurity, a recent discovery by McAfee researchers has sent shockwaves through the Android community. Xamalicious, a newly identified Android backdoor malware, has infected approximately 338,300 devices via malicious apps on the Google Play Store.</p>

<h3>Malicious apps</h3>

<p>Xamalicious was found embedded in 14 affected apps, with three accumulating a staggering 100,000 installs each before their removal from the Google Play Store. Despite their removal, users who inadvertently installed these apps since mid-2020 might still harbor Xamalicious on their devices.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text">Also Read</div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/artificial-intelligence/story/government-official-robbed-of-rs-158-lakh-in-advanced-ai-voice-scam-734267-2023-12-27">AI scam alert: Man loses Rs 1.58 lakh in an AI voice scam</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3>Widely installed Xamalicious-affected Android apps</h3>

<ul>
	<li>Essential Horoscope for Android (100,000 installs)</li>
	<li>3D Skin Editor for PE Minecraft (100,000 installs)</li>
	<li>Logo Maker Pro (100,000 installs)</li>
	<li>Auto Click Repeater (10,000 installs)</li>
	<li>Count Easy Calorie Calculator (10,000 installs)</li>
	<li>Dots: One Line Connector (10,000 installs)</li>
	<li>Sound Volume Extender (5,000 installs)</li>
</ul>

<h3>Unauthorised third-party app stores</h3>

<p>Beyond the Google Play Store, 12 malicious apps with the Xamalicious threat circulate on unauthorised third-party app stores. Users are susceptible through APK file downloads, as per media reports.</p>

<h3>Unique characteristics of Xamalicious</h3>

<p>Xamalicious stands out by being based on the .NET (It’s a developer platform for building many different types of applications) framework and integrated into apps developed using the open-source Xamarin framework. This unique feature poses challenges for cybersecurity experts engaged in code analysis.</p>

<h3>Modus operandi of Xamalicious</h3>

<p>Upon installation, Xamalicious seeks access to the accessibility service, enabling it to execute navigation gestures, conceal on-screen elements, and acquire additional permissions. Subsequently, the malware communicates with a Command and Control (C2) server to retrieve the second-stage DLL payload ('cache.bin') based on specific criteria.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text">Also Read</div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/cybersecurity/story/techie-loses-lakhs-in-bengaluru-otp-scam-while-selling-bed-online-on-olx-726832-2023-12-15">Online sale nightmare: Techie's Rs 68 lakh drained in OTP scam for selling bed on OLX</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3>Protecting your device against Xamalicious</h3>

<p>Users are strongly advised to manually check their devices for signs of Xamalicious infections. Even if the implicated apps have been uninstalled, the risk persists. Look for unwanted apps or suspicious settings and promptly remove them from your smartphone.</p>

<h3>Antivirus software: A shield against Xamalicious</h3>

<p>To fortify your device against malware threats, employing a reputable antivirus software is crucial. Regular manual clean-up and device scanning are recommended practices for ensuring ongoing protection.</p>

<p>In the face of the Xamalicious threat, knowledge is the first line of defense. Stay informed, take proactive measures, and prioritise the security of your Android device. Regularly scan for potential infections, use reliable antivirus software, and remain vigilant against emerging threats in the dynamic world of cybersecurity.</p>


There is a new threat to Android devices - Xamalicious. McAfee researchers unveil a backdoor malware infecting 338,300 devices via malicious Google Play Store apps. 

New Android malware, Xamalicious, has  infected 338,000 devices

The malware has been discovered by McAfee researchers

Xamalicious stands out by being based on the.NET framework

web3

Rogue apps alert: Xamalicious strikes Google Play, affects 338,300 devices

Xamalicious hits Google Play: Unmasking malicious threats

Artificial Intelligence

<p class="text-align-justify">In a distressing incident, a government official lost Rs 1.58 lakh to an AI voice scam where a fraudster cunningly mimicked a relative's voice through artificial intelligence (AI) to deceive the victim. The incident occurred earlier this month, and the victim shared his devastating experience.</p>

<h3 class="text-align-justify">It all starts with a phone call</h3>

<p class="text-align-justify">The victim received a call on 6 December 2023 from an unidentified mobile number. The caller, using AI voice spoofing, imitated the voice of the victim's brother-in-law, a judge in New Delhi. The scammer spun a tale of urgent financial need for the medical treatment of a friend in Lucknow. Believing it to be his brother-in-law, he transferred Rs 1.58 lakh to the account provided by the caller.</p>

<p class="text-align-justify">"The voice of the caller resembled that of my brother-in-law... and so I transferred the funds," the victim expressed.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text text-align-justify">Also read</div>

<ul class="tab-link">
	<li class="editor-readmore text-align-justify"><a class="editor-rel-content" href="https://www.web3cafe.in/artificial-intelligence/story/indias-first-ai-city-to-bloom-in-lucknow-uttar-pradesh-733488-2023-12-26">Big news: Lucknow set to pioneer India's first AI city as UP govt calls for project bids</a></li>
</ul>

<div class="text-align-justify" id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3 class="text-align-justify">Realisation &amp; complaint</h3>

<p class="text-align-justify">Upon later conversation with his actual brother-in-law, Prashant discovered the deception. His brother-in-law advised him to report the incident to the police. An FIR was lodged on 21 December 2023 under relevant sections of the IPC and IT Act, as confirmed by JK Singh, SHO, Hussainganj.</p>

<p class="text-align-justify">"Later, when I spoke to my brother-in-law, he denied having called me. He also asked me to lodge a complaint with the police,” recounted the victim.</p>

<h3 class="text-align-justify">AI voice scam unveiled</h3>

<p class="text-align-justify">Cyber expert Triveni Singh explained that the 'AI voice scam' employs artificial intelligence to replicate a person's voice, often targeting victims by posing as familiar figures like family members or friends. This deceptive technique aims to trick individuals into disclosing personal information or making financial transfers.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text text-align-justify">Also read</div>

<ul class="tab-link">
	<li class="editor-readmore text-align-justify"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/cybersecurity/story/mexico-files-a-lawsuit-against-the-whole-meta-platform-and-ceo-mark-zuckerberg-for-child-exploitation-on-his-platform-722582-2023-12-07">Lawsuit by New Mexico targets Meta &amp; Zuckerberg for child protection failures</a></li>
</ul>

<div class="text-align-justify" id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<p class="text-align-justify">"Scammers often use this technique to pose as family members, friends, or even customer service representatives to trick the victim into divulging personal information or sending money," warned Triveni Singh, former SP (cyber cell).</p>

<p class="text-align-justify">As authorities investigate the matter, this incident serves as a stark reminder to stay vigilant against evolving cyber threats, especially those utilising advanced technologies for fraudulent activities.</p>


Cyber expert Triveni Singh explained that the 'AI voice scam' employs artificial intelligence to replicate a person's voice, often targeting victims by posing as familiar figures like family members or friends.


A govt official lost Rs 1.58 lakh to an AI voice scam

The fraudster mimicked a relative's voice through AI to deceive the victim

"The voice of the caller resembled that of my brother-in-law," said the victim

artificial intelligence

AI scam alert: Man loses Rs 1.58 lakh in an AI voice scam

AI voice scam: A man loses Rs 1.58 lakh

<p>In a shocking incident, a 39-year-old engineer from Bengaluru fell victim to an OTP scam while attempting to sell his bed online through the popular platform OLX. The scam, orchestrated by a fraudulent buyer posing as a furniture store owner, resulted in the techie losing a staggering amount of Rs 68 lakh in a series of deceptive transactions.</p>

<h3>The deceptive transaction unfolds</h3>

<p>The victim had posted an advertisement on OLX to sell his used bed for Rs 15,000 when he received a call from an individual claiming to be a furniture store owner. The buyer, citing issues with UPI transactions, requested the engineer to send a nominal amount of Rs 5 to address the purported error. Falling into the trap, the techie sent Rs 10 as instructed. This marked the beginning of a harrowing sequence of transactions.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text">Also Read</div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/cybersecurity/story/mumbai-doctor-duped-of-rs-5-lakh-in-cyber-car-scam-717187-2023-11-27">Mumbai doctor scammed, loses Rs 5 lakh in cyber car scam: Authorities launch investigation</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<p>Subsequently, the fraudster manipulated the situation, instructing the victim to send larger amounts, such as Rs 5,000 and Rs 7,500. With each transaction, the scammer claimed to have mistakenly sent a higher sum, leading the techie to believe he was receiving extra funds. Eventually, the fraudster persuaded the engineer to return the excess money using a provided link and sharing crucial OTP details.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text">Also Read</div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/cybersecurity/story/protect-yourself-from-the-growing-courier-scam-urge-authorities-715422-2023-11-23">Beware of the courier scam: Banks issue cyber fraud alert amid rising threats</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3>Warnings from authorities</h3>

<p>Despite repeated warnings from banks, NCPI, and RBI against sharing OTPs, the victim inadvertently divulged the sensitive information. Authorities emphasise the importance of using OTPs only during legitimate transactions on trusted websites or apps. In cases where individuals receive unsolicited OTPs, it is crucial to change account passwords immediately and report unauthorised transactions to the respective bank.</p>

<p>This unfortunate incident serves as a stark reminder of the prevalence of online scams and the need for vigilance when engaging in virtual transactions. Users are urged to exercise caution, follow secure transaction practices, and remain vigilant to protect themselves from falling victim to such fraudulent schemes.</p>


A Bangalore-based techie was tricked by a fraudster posing as an interested buyer on OLX, resulting in financial losses through a series of transactions.

A Bengaluru-based techie fell victim to an OTP scam while attempting to sell his bed online through OLX

The fraudster persuaded the engineer to return the excess money using a provided link and sharing crucial OTP details

Online sale nightmare: Techie's Rs 68 lakh drained in OTP scam for selling bed on OLX

Techie's Rs 68 lakh drained in OTP scam for selling bed on OLX

<p>eCommerce giant Amazon has filed a lawsuit against an international cybercrime group called REKK for allegedly exploiting the company's return and refund system to steal millions of dollars worth of high-priced items like laptops and game consoles.</p>

<h3>REKK's modus operandi</h3>

<ul>
	<li>The group offered discounted high-priced items on social media platforms like Reddit and Discord.</li>
	<li>They communicated with shoppers on Telegram, a platform with 30,000 followers.</li>
	<li>REKK either hacked into Amazon's systems or bribed employees to approve fake returns.</li>
	<li>They stole the items and kept them for themselves, charging customers a commission on the purchase price.</li>
</ul>

<div id="tab-link-wrapper-plugin">
<div class="heading-text"><strong>Also Read</strong></div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/cybersecurity/story/mexico-files-a-lawsuit-against-the-whole-meta-platform-and-ceo-mark-zuckerberg-for-child-exploitation-on-his-platform-722582-2023-12-07">Lawsuit by New Mexico targets Meta &amp; Zuckerberg for child protection failures</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3>Millions lost and employees bribed</h3>

<ul>
	<li>The scheme operated for nearly a year, from June 2022 to May 2023, costing Amazon millions.</li>
	<li>REKK bribed at least seven former Amazon employees to approve fake returns.</li>
	<li>One employee approved $100,000 in fake returns for $3,500, while another received $5,000 for approving $75,000 in fake returns.</li>
</ul>

<h3>Amazon's actions</h3>

<ul>
	<li>Amazon filed a lawsuit against REKK and nearly 30 individuals from various countries.</li>
	<li>They seek damages for the millions lost and an injunction to stop REKK's operations.</li>
	<li>Amazon spends heavily on security, investing $1.2 billion and employing 15,000 people in 2022 alone to combat theft, fraud, and abuse.</li>
</ul>

<div id="tab-link-wrapper-plugin">
<div class="heading-text"><strong>Also Read</strong></div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/visualstories/gadgets/vivo-x100-and-vivo-x100-pro-to-launch-in-india-on-14-december-prices-specs-features-and-more-81317-11-12-2023">Vivo X100 and Vivo X100 Pro To Launch In India On 14 December: Prices, Specs, Features And More</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<p>This event highlights the growing threat of cybercrime in the eCommerce industry. Amazon's case against REKK serves as a reminder that even large companies with robust security measures can be vulnerable to sophisticated attacks. It is crucial for companies and individuals to remain vigilant and implement strong security measures to protect themselves from online scams.</p>


Amazon is pursuing compensation following substantial financial losses incurred due to an international cybercriminal syndicate that took advantage of the company's return and refund system.


REKK operated for a year, costing Amazon millions in stolen laptops, game consoles, and other high-priced items

The group either hacked into Amazon's systems or bribed employees to approve fake returns

Amazon is suing REKK and nearly 30 individuals for millions in damages and to stop their operations

REKKed scammers exploit Amazon's return system, steal millions in MacBooks and other high-priced items

REKK's return reversal: Millions in MacBooks stolen in Amazon scam

<p>New Mexico Attorney General Raul Torrez has filed a lawsuit against Facebook's parent company, Meta Platforms, and CEO Mark Zuckerberg. The state alleges that the social media giant has failed to protect children from sexual abuse, online socialisation, and human trafficking.</p>

<p>Torrez emphasises that their investigation reveals Meta's platforms are not safe for children but instead serve as prime locations for predators. The statement from&nbsp;New Mexico Attorney General states,</p>

<p>&nbsp;</p>

<blockquote class="at-quotes">
<p>Our investigation into Meta’s social media platforms demonstrates that they are not safe spaces for children but rather prime locations for predators to trade child pornography and solicit minors for sex.</p>

<div class="author">Raul Torrez</div>
</blockquote>

<p>&nbsp;</p>

<h3>Exploitation enabled by Meta</h3>

<p>The Attorney General accuses Meta of enabling adults to find, contact, and pressure children into providing explicit content. Despite Meta's claims of using advanced technology and hiring child safety experts, Torrez asserts that the company has not made sufficient changes to prevent the exploitation of children on its platforms.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text"><strong>Also Read</strong></div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/cybersecurity/story/us-senator-exposes-apple-and-google-for-spying-our-smartphones-through-push-notifications-that-appear-on-our-phone-through-there-app-722526-2023-12-07">US senator reveals alarming govt surveillance through Apple &amp; Google push notifications</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3>Meta's response</h3>

<p>In response, Meta defends its efforts, citing the use of sophisticated technology, collaboration with experts, and disabling over 500,000 accounts for violating child sexual exploitation policies in August alone. However, Torrez alleges that Zuckerberg and Meta executives are aware of the harm their products pose to young users but have not taken adequate measures.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text"><strong>Also Read</strong></div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/cybersecurity/story/china-cyberspace-administration-has-blocked-alibabas-livestreaming-platform-for-vulgar-content-704559-2023-11-02">China's cyberspace administration targets vulgar content on Alibaba-owned platforms</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3>National &amp; ongoing legal landscape</h3>

<p>This lawsuit adds to the legal troubles for Meta, as Montana Attorney General Austin Knudsen filed a similar suit, claiming Instagram was intentionally designed to be addictive, especially for minors.</p>

<p>In October, more than 40 U.S. states sued Meta, accusing it of contributing to a youth mental health crisis. Senators Ed Markey and Bill Cassidy also accused Meta of intentionally evading children's privacy laws.</p>

<p>These legal actions are part of a broader trend where social media companies, including Meta, TikTok, and YouTube, face numerous lawsuits related to the addictiveness of their platforms, particularly concerning the well-being of children and teens.</p>


New Mexico Attorney General Raul Torrez sued Meta Platforms and CEO Mark Zuckerberg, alleging Facebook's failure to safeguard children from sexual abuse, online solicitation, and human trafficking. Legal action intensifies.



Mexico sues Meta and Zuckerberg over child safety 

Meta's platforms are deemed unsafe for kids, enabling exploitation

Growing lawsuits allege youth mental health risks and addictive social media design

Mexico sues Facebook 

 Lawsuit by New Mexico targets Meta & Zuckerberg for child protection failures

New Mexico sues Meta & Zuckerberg over child safety

<p>Unidentified governments are secretly spying on smartphone users through app push notifications, according to a warning from the U.S. Senator Ron Wyden. In a letter to the Department of Justice, Wyden disclosed that foreign officials are pressuring Google and Apple for user data. The method, although lacking in details, sheds light on another way governments can track smartphones.</p>

<p>Apps use push notifications to inform users about messages, news, or updates. What users might not realise is that these notifications pass through Google and Apple's servers, giving these companies unique insights into app usage.</p>

<p>Senator Wyden thinks this gives them the ability to support government surveillance. He urges the Department of Justice to reconsider policies hindering public discussions on this spying method.</p>

<h3>Companies' responses</h3>

<p>Apple acknowledges Wyden's letter as an opportunity to share more information about government monitoring of push notifications. The company states,&nbsp;</p>

<blockquote class="at-quotes">
<p>Now that this method has become public, we are updating our transparency reporting to detail these kinds of requests.</p>
</blockquote>

<p>&nbsp;</p>

<p>Google expresses its commitment to keeping users informed about such requests. The Department of Justice declined to comment on push notification surveillance or whether it prevented Apple and Google from discussing it.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text"><strong>Also Read</strong></div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/cybersecurity/story/instagram-reels-algorithms-are-showing-explicit-content-coming-up-my-teenage-and-children-influencers-including-some-big-brands-717814-2023-11-28">Concerns mount as Instagram Reels allegedly feature inappropriate content alongside ads by top companies</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3>Surveillance details &amp; concerns</h3>

<p>Senator Wyden got a "tip" about the spying. The source confirmed that both foreign and U.S. governments asked Apple and Google for details about push notifications. The purpose is to link anonymous users of messaging apps to specific accounts. While the source does not disclose the foreign governments involved, they describe them as U.S. allies.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text"><strong>Also Read</strong></div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/cybersecurity/story/new-bluetooth-cyberthreat-bluffs-puts-devices-at-risk-719459-2023-12-01">Bluetooth bummer: Hackers unleash sneaky BLUFFS, devices launched post 2014 at risk</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3>Privacy concerns</h3>

<p>Many users overlook push notifications, but they have raised privacy concerns. French developer David Libeau previously highlighted how apps often unknowingly send data to Google or Apple via push notifications, calling it a "privacy nightmare."</p>

<p>In essence, this revelation raises concerns about governments exploiting push notifications for surveillance, prompting calls for increased transparency and public awareness.</p>


Senator Ron Wyden warns of unidentified governments surveilling smartphone users through app push notifications, demanding data from Google and Apple, raising concerns about smartphone tracking.


Senator Wyden uncovers secret smartphone surveillance through app push notifications

Foreign and U.S. officials demand user data from Google and Apple

Push notifications' role in tracking raises transparency and surveillance worries

US senator reveals smartphone spying

 US senator reveals alarming govt surveillance through Apple & Google push notifications

Senators expose smartphone spying through app notifications

<p>In a distressing tale of online deceit, an 83-year-old man falls prey to a clever 'KYC call' scam, losing a staggering Rs 2.5 lakh. The unsuspecting victim's attempt to verify his details takes an unexpected turn when he hands over the phone to his 11-year-old grandson, resulting in a substantial financial loss.</p>


In a distressing tale of online deceit, an 83-year-old man falls prey to a clever 'KYC call' scam, losing a staggering Rs 2.5 lakh. The unsuspecting victim's attempt to verify his details takes an unexpected turn when he hands over the phone to his 11-year-old grandson, resulting in a substantial financial loss.

scam

Online fraud unveiled: 83-Year-Old Duped in KYC Hoax, Loses Rs 2.5 Lakh

<p>In a digital age where connectivity is paramount, recent revelations about Bluetooth security flaws could send shockwaves to general users. Security researchers at Eurecom (French research centre in digital sciences), led by Daniele Antonioli, have unearthed six new attacks named 'BLUFFS.'</p>

<p>These exploits can impact all devices launched after 2014 with Bluetooth 4.2 or newer versions, including laptops, PCs, smartphones, and tablets.</p>

<h3>Unveiling the BLUFFS attacks</h3>

<p>The BLUFFS attacks utilise two undisclosed exploits in the Bluetooth architecture, allowing hackers to impersonate devices and execute man-in-the-middle attacks. These vulnerabilities operate at an architectural level, transcending hardware and software configurations. The research <a href="https://dl.acm.org/doi/pdf/10.1145/3576915.3623066">paper</a> suggests that devices with Bluetooth 4.2 (late 2014) to Bluetooth 5.4 (released this year) are susceptible to at least 3 out of 6 BLUFFS attacks.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text">Also Read</div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/video/new-cyber-fraud-wave-protect-yourself-from-the-rising-courier-scam-715997-2023-11-24">New Cyber Fraud Wave: Protect Yourself from the Rising ‘Courier Scam’</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3>How does a BLUFFS attack work?</h3>

<p>BLUFFS takes advantage of four problems in how Bluetooth creates secret codes for sessions. Two of these problems are new, making it easier for BLUFFS to figure out a short and easy-to-guess secret code. Once BLUFFS gets this code, it uses a method called brute force to crack it open.</p>

<p>This allows the trickster to read what devices said to each other in the past and even mess with what they might say in the future. It's like someone eavesdropping on private conversations between devices!</p>

<h3>Devices at risk</h3>

<p>The gravity of the situation becomes apparent as we realise that all Bluetooth-enabled devices are potential targets. Even Apple's AirDrop, which relies on Bluetooth for file transfers, is vulnerable. This comprehensive vulnerability affects a wide array of devices, emphasising the urgency of addressing the issue.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text">Also Read</div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/cybersecurity/story/chinas-new-crypto-scam-hackers-use-fake-scam-skype-app-710416-2023-11-13">Chinese cybercriminals exploit fake Skype app in new crypto phishing scheme</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3>Protection amidst vulnerabilities</h3>

<p>Unfortunately, users can do little to fix the vulnerabilities, as they operate at an architectural level. The solution lies in the hands of device manufacturers, requiring them to enhance security mechanisms and reject low-security authentication methods employed by older devices.</p>

<h3>Turning off Bluetooth: A temporary solution</h3>

<p>Given the current scenario, the most effective immediate measure is to turn off Bluetooth once its usage is complete. While inconvenient for many users, it minimises the risk of potential attacks. Additionally, avoiding the sharing of sensitive files and images via Bluetooth in public spaces serves as an extra layer of precaution.</p>

<p>The emergence of Bluetooth security flaws is a stark reminder of the ever-evolving threat landscape in the digital realm. While immediate solutions may be inconvenient, it is crucial to prioritise device security. Manufacturers need to implement changes to counter these vulnerabilities, ensuring a safer technological environment for all users.</p>


Beware, as the once-trusted Bluetooth faces a new threat! BLUFFS, the cunning exploit, is shaking the foundations of device security, revealing a world where hackers can now dance through Bluetooth connections, eavesdropping on past conversations and manipulating future dialogues.

BLUFFS attack exploits Bluetooth to put device security at risk

Devices launched after 2014 at risk due to this cybersecurity threat

Apple's AirDrop which relies on Bluetooth also vulnerable

Bluetooth bummer: Hackers unleash sneaky BLUFFS, devices launched post 2014 at risk

BLUFFS' threatens Bluetooth security

<p>Instagram's Reels video service, designed to entertain users with short videos, is facing scrutiny. Owned by Meta Platforms, the social app's algorithm, as revealed by The Wall Street Journal's investigation, is delivering inappropriate content to adults, especially those who follow teen influencers on the platform.</p>

<p>The Journal conducted tests to understand what Instagram's Reels algorithm would suggest to accounts focused on young gymnasts, cheerleaders, and teen influencers. Shockingly, the algorithm recommended explicit content, including inappropriate footage of children and overtly sexual adult videos, interspersed with ads from major U.S. brands.</p>

<blockquote class="twitter-tweet">
<p dir="ltr" lang="en">What say you, big brands? <a href="https://t.co/GKEzn1fqQb">https://t.co/GKEzn1fqQb</a></p>
— Elon Musk (@elonmusk) <a href="https://twitter.com/elonmusk/status/1729366283370512685?ref_src=twsrc%5Etfw">November 28, 2023</a></blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>

<h3>Major brands linked to inappropriate content</h3>

<p>In a disturbing twist, the ads from prominent brands like Disney, Walmart, Match Group, Hims, and even The Wall Street Journal were displayed alongside inappropriate content. Companies, upon learning about this, expressed concern, and some, like Match, suspended advertising on Reels. Meta, in response, initiated investigations and offered brand-safety audits.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text"><strong>Also Read</strong></div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/cybersecurity/story/interpol-issues-warning-on-rising-airline-ticket-scam-711277-2023-11-15">Holiday travelers beware: Rising threat of airline ticket scam revealed by INTERPOL</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3>Meta's pledge &amp; industry concerns</h3>

<p>Meta defended its platform, stating the tests created a unique experience not reflective of billions of users. The company emphasised its commitment to brand safety tools introduced in October. However, concerns persist about the algorithm's compilation of content showing children, explicit material, and advertisements. The Journal had previously reported on meta-algorithms connecting users interested in inappropriate content.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text"><strong>Also Read</strong></div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/cybersecurity/story/worlds-largest-bank-industrial-and-commercial-bank-of-india-has-been-hacked-by-ransom-leaving-us-unit-unable-to-process-us-treasury-trade-708962-2023-11-10">World's largest bank forced to use USB stick for trading after cyberattack cripples its network</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3>Instagram facing criticism</h3>

<p>Instagram's Reels, while aiming to compete with TikTok, faces severe criticism for delivering inappropriate content. Major brands are re-evaluating their association with the platform, urging Meta to address the alarming issue promptly. The challenges highlight broader concerns about algorithmic recommendations, child safety, and the responsibility of social media platforms.</p>


Instagram's Reels algorithm, owned by Meta Platforms, faced criticism as it recommended explicit content to test accounts specifically created to follow young influencers. Concerns rise as the system exposes minors and adults to inappropriate material. 


Instagram Reels accused of displaying controversial content adjacent to ads by top companies 

Major brands suspend ads on Reels as their content appears alongside inappropriate material, urging Meta to take action

Ongoing challenges highlight broader concerns about algorithmic safety and child protection across social media platforms

Concerns mount as Instagram Reels allegedly feature inappropriate content alongside ads by top companies

Instagram's reels algorithm exposes adults to inappropriate videos of minors

<p>A Mumbai physician fell victim to a cyber fraud scheme, losing over Rs 5 lakh in a bogus car purchase. This incident underscores the importance of cybersecurity awareness and cautious online engagement to safeguard individuals from falling prey to deceitful schemes.</p>


A Mumbai physician fell victim to a cyber fraud scheme, losing over Rs 5 lakh in a bogus car purchase. This incident underscores the importance of cybersecurity awareness and cautious online engagement to safeguard individuals from falling prey to deceitful schemes.

Mumbai Doctor Falls Prey to Cyber Fraud: Loses Rs 5 Lakh in Car Purchase Scam

<p><meta charset="utf-8" /><b id="docs-internal-guid-298c3ca6-7fff-ef4b-7de2-67b29611e3aa">Beware: Scammers up their game! Using fake clone apps, they're crafting convincing videos of profit/loss statements and trading reports. Bewilderingly authentic, these videos are the new weapon in their deceptive toolbox. Stay alert &amp; stay aware.</b></p>


Beware: Scammers up their game! Using fake clone apps, they're crafting convincing videos of profit/loss statements and trading reports. Bewilderingly authentic, these videos are the new weapon in their deceptive toolbox. Stay alert & stay aware.

Here’s how AI is being used to deceive investors with deep fake stock market scams?

<p>In a distressing turn of events, Mumbai-based Dr. Prabhat Shah, a 52-year-old physician, fell victim to a cyber fraud scheme, losing over Rs 5 lakh in a bogus car purchase. The incident commenced when Dr. Shah, intrigued by an alluring Facebook ad, responded to an advertisement promising a seized Fortuner E4 at a mere Rs 19 lakh. Little did he know that this enticing offer was a ruse orchestrated by an impersonator posing as a bank recovery agent.</p>

<h3>Trust exploited, documents compromised</h3>

<p>Blinded by the illusion of legitimacy, Dr. Shah willingly handed over sensitive documents, including his Aadhar card, PAN card, and bank statements. An official-looking email further convinced him of the deal's authenticity, prompting him to transfer a substantial sum of Rs 5.87 lakh to the specified bank account. However, the moment of dismay struck when Dr. Shah, anticipating the acquisition of his dream car, discovered the provided address in Solapur was non-existent, and attempts to contact the agent were met with disconnected phone lines.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text">Also Read</div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/cybersecurity/story/protect-yourself-from-the-growing-courier-scam-urge-authorities-715422-2023-11-23">Beware of the courier scam: Banks issue cyber fraud alert amid rising threats</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3>Legal pursuits and cyber vigilance</h3>

<p>Acting swiftly, the Kandivali police registered a case against the unidentified fraudster under sections 419 and 420 of the Indian Penal Code, along with relevant sections of the Information Technology Act. This unfortunate incident serves as a poignant reminder of the persistent threat of cyber fraud. Authorities emphasise the critical need for vigilance in online transactions, urging citizens to verify deals thoroughly and avoid sharing sensitive information without robust verification.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text">Also Read</div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/explainers/story/what-are-aeps-and-how-scammers-exploit-aadhaar-to-clone-fingerprints-715039-2023-11-22">Scammers can clone your fingerprint for fraud: What you need to know &amp; how to protect yourself</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<p>As Dr. Shah endeavors to recover from this distressing experience, efforts are underway to trace the elusive fraudster and bring them to justice. This incident underscores the importance of cybersecurity awareness and cautious online engagement to safeguard individuals from falling prey to deceitful schemes.</p>


This occurrence highlights the significance of promoting cybersecurity awareness and exercising prudence in online interactions to protect individuals from becoming victims of deceptive schemes.

The victim was intrigued by an alluring Facebook ad

Blinded by the illusion of legitimacy, he willingly handed over sensitive documents, including his Aadhar card, PAN card, and bank statements

Mumbai doctor scammed, loses Rs 5 lakh in cyber car scam: Authorities launch investigation

Mumbai doctor scammed, loses Rs 5 lakh in cyber car scam

<p>In a surprising twist, automotive technology firm Valeo has initiated legal action against graphics chip giant Nvidia, alleging the misappropriation of trade secrets. The lawsuit centres around Nvidia employee Mohammad Moniruzzaman, a former Valeo staff member, accused of pilfering the source code for Valeo's cutting-edge parking and driving assistance systems in early 2021.</p>

<p>The legal document contends that during an online presentation to a Valeo team, Moniruzzaman inadvertently revealed a file containing the company's proprietary information, thereby exposing his purported theft.</p>

<p>&lt;blockquote class="twitter-tweet"&gt;&lt;p lang="en" dir="ltr"&gt;Automotive tech company Valeo sues Nvidia, after an Nvidia engineer accidentally shared data he stole from his former employer Valeo, on a video call with Valeo (Bloomberg) &lt;a href="https://t.co/woGPWIRiPk"&gt;https://t.co/woGPWIRiPk&lt;/a&gt; &lt;a href="https://t.co/3AIQgRA3mV"&gt;pic.twitter.com/3AIQgRA3mV&lt;/a&gt;&lt;/p&gt;&amp;mdash; Carlos Cuquejo (@HostingCarlos) &lt;a href="https://twitter.com/HostingCarlos/status/1727796773232710132?ref_src=twsrc%5Etfw"&gt;November 23, 2023&lt;/a&gt;&lt;/blockquote&gt; &lt;script async src="https://platform.twitter.com/widgets.js" charset="utf-8"&gt;&lt;/script&gt;</p>

<p>Valeo further asserts that Moniruzzaman had downloaded the complete source code for Valeo's advanced parking and driving assistance systems, alongside numerous documents, presentations, and spreadsheets.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text"><strong>Also Read</strong></div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/gaming/story/garena-free-fire-max-redeem-codes-on-24-nov-and-get-latest-codes-for-room-cards-emotes-and-other-rewards-715915-2023-11-24">Garena Free Fire MAX redeem codes for 24 Nov, get latest codes for room cards, emotes &amp; other rewards</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<p>Valeo contends that the actions of Moniruzzaman have inflicted significant financial harm, asserting that Nvidia benefited by saving millions in development costs through the utilisation of the allegedly stolen trade secrets. Seeking injunctive relief, the lawsuit aims to restrain Nvidia from further leveraging Valeo's intellectual property and seeks compensation for the damages incurred.</p>

<p>As of now, Nvidia has not responded to the lawsuit. However, a legal representative for the company has stated that Nvidia holds no interest in Valeo's code or alleged trade secrets. The representative emphasised that Nvidia has taken measures to safeguard Valeo's asserted rights.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text"><strong>Also Read</strong></div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/visualstories/gadgets/oneplus-12-to-feature-wooden-texture-back-panel-new-77952-24-11-2023">OnePlus 12 To Feature Wooden Texture Back Panel: New Leak Reveals</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<p>This legal dispute underscores the critical need for safeguarding intellectual property and the potential repercussions associated with theft. The incident serves as a reminder for companies to remain vigilant in protecting confidential information and underscores the importance of taking swift legal action against those accused of misappropriation.</p>

<p>As the case unfolds, it will likely shed light on the broader implications for the tech and automotive industries in terms of protecting proprietary innovations and trade secrets.</p>


This legal dispute underscores the critical need for safeguarding intellectual property and the potential repercussions associated with theft.


Former Valeo employee accused of stealing source code for parking and driving assistance systems

Nvidia employee inadvertently revealed stolen files during an online presentation

Valeo seeks injunction and compensation for damage

Valeo accuses tech giant Nvidia of stealing trade secrets in shocking lawsuit

Valeo Vs. Nvidia: Trade secret theft alleged

<p>A new wave of scams is sweeping across metro cities, leaving victims losing lakhs to fale police and customs calls. Stay cautious, protect personal info!</p>


A new wave of scams is sweeping across metro cities, leaving victims losing lakhs to fale police and customs calls. Stay cautious, protect personal info!

New Cyber Fraud Wave: Protect Yourself from the Rising ‘Courier Scam’

<p>A dangerous new scam is sweeping across metro cities, leaving unsuspecting Indians in financial turmoil. Fraudsters, disguising themselves as customs officials, have successfully duped people of lakhs in a crafty scheme known as the 'courier scam.' This rising menace involves impersonating police officials or NCRB agents, accusing victims of illicit parcel activities. The scam, primarily targeting individuals aged 35 to 50, has witnessed hundreds of reported cases this year, leading to significant financial losses.</p>

<h3>How the scam works</h3>

<p>In the intricate web of the courier scam, perpetrators pose as customs officials, contacting targets over the phone. They allege the involvement of the victim in sending or receiving parcels containing illegal substances. Posing as police officers, the scammers instill fear of impending arrest and coerce victims into settling false complaints by offering money. Using psychological tactics, they extract personal identification and bank details, often demanding Aadhaar information in addition to bank particulars.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text">Also Read</div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/cryptocurrency/story/yes-world-crypto-token-ponzi-scam-unearthed-in-odisha-country-head-arrested-714524-2023-11-21">Odisha shuts down ‘Yes World Crypto Token’: Country Head arrested in Rs 200 cr crypto ponzi scam</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<p>Another modus operandi begins with a missed call. Upon returning the call, victims are directed to an automated voice message claiming to be a courier company's helpline. The caller, impersonating a Mumbai police officer, asserts the discovery of illegal drugs in a parcel sent to the victim's address, subsequently blackmailing them into making payments.</p>

<h3>Real-life victim</h3>

<p>The courier scam's impact is exemplified by the recent case of Debashish Das, a 66-year-old Bengaluru resident. Falling prey to the scam, he lost a staggering Rs 1.52 crore. The fraudsters, claiming to be a FedEx employee, accused Das of a courier containing credit cards, expired passports, and drugs. The elaborate ruse involved Skype calls with fake police officers, leading to the transfer of all of Das's money, including fixed deposits, to the scamsters' account.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text">Also Read</div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/artificial-intelligence/story/ai-voice-scam-alert-woman-loses-rs-14-lakh-by-nephews-mimicked-ai-voice-712471-2023-11-17">Beware of AI voice scams: Woman loses Rs 1.4 lakh in devastating AI voice scam</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3>Rising cases and warnings</h3>

<p>The courier scam is on the rise, with as many as 250 reported cases in Bengaluru this year alone. Authorities, recognising the severity of the issue, have issued warnings urging people to be vigilant against such fraudulent calls. Banks and police are prioritizing the investigation of these cases, alongside other common cyber frauds like Aadhaar Enabled Payment Services fraud, WhatsApp sextortion, and online job fraud.</p>

<h3>How to stay safe</h3>

<p>To protect oneself from falling victim to such scams, individuals are advised not to provide sensitive information like OTPs, Aadhaar numbers, or bank details. Vigilance against unknown callers impersonating officials is crucial, and individuals are urged never to call back on suspicious contacts. Reverification of the caller through official sources before sharing any information and refraining from clicking on suspicious links are essential precautions. Acting with caution, gathering information, and consulting trusted individuals before making transactions can significantly reduce the risk.</p>

<p>As the courier scam continues to evolve, staying informed and adopting preventive measures is paramount. Individuals are encouraged to report any cybercrime incidents to the designated helpline at 155260 or file a complaint on cybercrime.gov.in. Vigilance and awareness are the keys to safeguarding oneself against this growing digital threat.</p>


Fraudsters, disguising themselves as customs officials, have successfully duped people of lakhs in a crafty scheme known as the 'courier scam.' 

This rising menace involves impersonating police officials or NCRB agents, accusing victims of illicit parcel activities

Posing as police officers, the scammers instill fear of impending arrest and coerce victims into settling false complaints by offering money

Beware of the courier scam: Banks issue cyber fraud alert amid rising threats

Courier scam: Banks issue cyber fraud alert amid rising threats

<p>Imagine buying lipstick online for Rs 500 and ending up losing Rs 1 Lakh! Well, that’s what happened to a woman in Mumbai who fell for a tricky courier delivery scam.</p>

<h3>Here's how it happened</h3>

<p>Scammers pretended to be delivery people and told her there was a problem delivering her package. They asked for a small cancellation fee of Rs 2. The woman, without thinking much, paid the money through a link they sent her. But here's the catch – she had to download an app through that link.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text"><strong>Also Read</strong></div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/visualstories/artificial-intelligence/top-5-ai-based-cybersecurity-threats-to-be-aware-of-77343-21-11-2023">Top 5 AI Cybersecurity Threats To Be Aware Of</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<p>While making the payment, she didn't realise that she was giving away her banking details to the scammers. And that's how they took away Rs 1 lakh from her bank account in two transactions – Rs 95,000 and Rs 5,000. Now, she has reported the incident to the cyber police station in Nerul, Navi Mumbai.</p>

<p><a href="https://www.web3cafe.in/artificial-intelligence/story/man-in-china-loses-rs-5-crore-in-ai-based-scam-563189-2023-05-24">Online scams</a> are becoming more common as more people use the internet for everyday tasks. Scammers can easily hide who they are and trick people into giving them personal information or money. They use different tricks, like fake emails, websites, customer care representatives, delivery scam, <a href="https://www.web3cafe.in/web3/cybersecurity/story/delhi-doctor-loses-rs-5-lakh-in-cab-refund-scam-714520-2023-11-21">cab refund scam</a>, social media posts, <a href="https://www.web3cafe.in/artificial-intelligence/story/indian-actress-rashmika-mandanna-has-gone-viral-on-internet-because-of-a-deepfake-video-representing-her-as-caused-a-big-concern-against-ai-technology-and-cybersecurity-706482-2023-11-06">deepfakes</a> and many others.</p>

<h3>How to avoid falling into such traps, here are some simple tips</h3>

<ul>
	<li><strong>Be cautious when searching for customer support numbers&nbsp;-</strong> Don't blindly trust what you find on search engines. Always double-check before calling any number you find online.</li>
	<li><strong>Don't click on unfamiliar links - </strong>If you get a link from someone you don't know, especially if it's from another country, don't click on it. It could install a harmful app on your phone.</li>
</ul>

<div id="tab-link-wrapper-plugin">
<div class="heading-text"><strong>Also Read</strong></div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/artificial-intelligence/story/deepfake-big-threat-to-india-system-can-cause-chaos-in-the-society-says-pm-modi-712557-2023-11-17">PM Modi flags misuse of AI to create Deepfake videos</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<ul>
	<li><strong>Never share OTPs or banking info -&nbsp;</strong>No matter how convincing someone sounds, never share your One-Time Passwords or sensitive banking details over the phone or in person.</li>
	<li><strong>Be sceptical of unexpected calls about package cancellations -</strong>&nbsp;If someone calls you about cancelling a package you don't remember ordering, be suspicious. Legitimate delivery services don't ask for 'cancellation fees.'</li>
</ul>

<p>Stay alert, question things that seem odd, and follow these tips to protect yourself from falling victim to online scams.</p>


Scammers pretended to be delivery people and told her there was a problem delivering her package.


Scammers posed as delivery people and asked for a small cancellation fee

The woman paid the money through a link, which unknowingly downloaded an app that stole her banking details

Scammers stole Rs 1 lakh from her account in two transactions

Can a lipstick cost Rs 1 lakh? Here’s how this Mumbai doctor fell prey to a scam

 Lipstick online scam: Mumbai doctor falls prey

Explainers

<p class="text-align-justify">In the heartlands of rural India, where financial inclusion has found a light in the Aadhaar Enabled Payment System (AePS), a sinister threat has emerged.</p>

<p class="text-align-justify">Scammers, preying on the unsuspecting, have devised a cunning method to clone fingerprints and exploit the very system designed to empower the underprivileged. This clandestine operation, targeting the economically vulnerable, has raised alarms among local authorities. Now let’s shed some light on what AePs are, how they work, and how scammers have exploited the rise of AePs.</p>

<h3 class="text-align-justify">What is AePS?</h3>

<p class="text-align-justify">AePS, or Aadhaar Enabled Payment System, was introduced by the Indian government in 2014 to bring banking services to remote areas lacking traditional banks. It allows people, especially in villages, to perform banking transactions using Aadhaar-based authentication and biometric information like thumb impressions.</p>

<drupal-entity data-caption="AePs, finger print" data-embed-button="ckeditor_image" data-entity-embed-display="view_mode:media.image" data-entity-type="media" data-entity-uuid="b7b6e7dc-5279-4d5a-be75-b74f5ea3e774"></drupal-entity>

<h3 class="text-align-justify">How does AePS work?</h3>

<p class="text-align-justify">With AePS, individuals don't need to visit a bank or possess an ATM card for transactions. Instead, they can go to a Customer Service Point (CSP) or a business correspondent. The process involves providing the 12-digit Aadhaar number and bank account details to the CSP. Afterwards, the person's thumb impression is taken on a Point of Sale (PoS) machine for verification. Once verified, they can withdraw or deposit cash.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text text-align-justify">Also read</div>

<ul class="tab-link">
	<li class="editor-readmore text-align-justify"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/cybersecurity/story/interpol-issues-warning-on-rising-airline-ticket-scam-711277-2023-11-15">Holiday travelers beware: Rising threat of airline ticket scam revealed by INTERPOL</a></li>
</ul>

<div class="text-align-justify" id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3 class="text-align-justify">How scammers are using your fingerprint?</h3>

<p class="text-align-justify">Unfortunately, scammers have found a way to exploit this system. They use deceitful tactics, like promising instant loans or government benefits, to obtain villagers' thumb impressions.</p>

<p class="text-align-justify">These impressions are then cloned using materials like M-seal (a sealant) or paper. Scammers withdraw money from victims' accounts, leaving them unaware until they visit the bank.</p>

<drupal-entity data-caption="Scammers withdraw money from victims&amp;#039; accounts" data-embed-button="ckeditor_image" data-entity-embed-display="view_mode:media.image" data-entity-type="media" data-entity-uuid="ea984c2b-dcda-4486-8e1f-566b3e9aa2d8"></drupal-entity>

<p class="text-align-justify">The scammers applied glue on the M-seal where the thumb imprint was placed. The impression then appears on it once the adhesive has dried. This would allow them to use the impression of the glue on the machine to take money out of peoples' bank accounts in this manner.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text text-align-justify">Also read</div>

<ul class="tab-link">
	<li class="editor-readmore text-align-justify"><a class="editor-rel-content" href="https://web3cafe-en.cms-visualstories.intoday.in/wp-admin/post.php?post=27338&amp;action=edit#page=%2522f1bd71af-ab18-4da6-ac5b-5cda241c9ccb%2522">Lost Your Mobile? Here's How You Can File A Complaint</a></li>
</ul>

<div class="text-align-justify" id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<p class="text-align-justify">The fraudsters are utilising fingerprints obtained from land registry documents too. They collaborate with lower-level employees of the Land Records Department to acquire papers associated with land registration, where individuals' thumb impressions and Aadhaar card details are obligatory.</p>

<h3 class="text-align-justify">Scams unveiled: Victims speak out</h3>

<p class="text-align-justify">Reports revealed instances like Urmila Kumari, a resident of Nawada district in Bihar, who lost 57,900 rupees to a fingerprint cloning scam.</p>

<p class="text-align-justify">Kumari successfully traced the recipient, who confessed to the wrongdoing, assuring her of a refund and urging her not to file an FIR. This is not an isolated case; the Bihar police, tired of scams via AePS (Aadhaar Enabled Payment System), established a dedicated team in July 2023.</p>

<p class="text-align-justify">Despite identifying the receiver, many victims hesitate to file FIRs, complicating law enforcement efforts. The Bihar police formed a special team after recovering 512 cloned thumb impressions, highlighting the extent of this burgeoning scam.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text text-align-justify">Also read</div>

<ul class="tab-link">
	<li class="editor-readmore text-align-justify"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/cybersecurity/story/worlds-largest-bank-industrial-and-commercial-bank-of-india-has-been-hacked-by-ransom-leaving-us-unit-unable-to-process-us-treasury-trade-708962-2023-11-10">World's largest bank forced to use USB stick for trading after cyberattack cripples its network</a></li>
</ul>

<div class="text-align-justify" id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3 class="text-align-justify">AePS: Enabling financial inclusion or facilitating fraud?</h3>

<p class="text-align-justify">AePS, intended for financial inclusion, has become a double-edged sword. With more than 200.6 million last-mile banking transactions recorded in April 2023, it has inadvertently facilitated a surge in financial fraud. A letter from Rajya Sabha MP John Brittas to Prime Minister Narendra Modi underscores the urgent need to address the growing exploitation of AePS.</p>

<blockquote class="at-quotes">
<p class="text-align-justify">"People easily fall victim to the fraud because it is unimaginable that one can be duped via just thumb impressions and Aadhaar details."</p>

<div class="author text-align-justify">SP Sushil Kumar of Bihar's cybercrime section</div>
</blockquote>

<h3 class="text-align-justify">How to stay informed &amp; safe?</h3>

<p class="text-align-justify"><strong>- Avoid unnecessary Aadhaar sharing:</strong> Be cautious about sharing Aadhaar details unnecessarily. Use alternative identity proofs where Aadhaar is not mandatory.</p>

<p class="text-align-justify"><strong>- Scrutinise CSP operators:</strong> There is a need for proper scrutiny of Customer Service Point (CSP) operators and business correspondents as transactions often occur through them.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text text-align-justify">Also read</div>

<ul class="tab-link">
	<li class="editor-readmore text-align-justify"><a class="editor-rel-content" href="https://web3cafe-en.cms-visualstories.intoday.in/wp-admin/post.php?post=27297&amp;action=edit#page=%2522f1bd71af-ab18-4da6-ac5b-5cda241c9ccb%2522">Top 5 AI Cybersecurity Threats To Be Aware Of</a></li>
</ul>

<div class="text-align-justify" id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<p class="text-align-justify"><strong>- Multi-Factor authentication: </strong>Experts recommend implementing multi-factor authentication in AePS, similar to online banking transactions. This adds an extra layer of security.</p>

<p class="text-align-justify">As the authorities grapple with this issue, individuals must stay vigilant and adopt these precautions to safeguard themselves from falling victim to fingerprint cloning scams through AePS.</p>

<p class="text-align-justify">As investigations unfold, the police face challenges in identifying culprits due to a lack of supporting documents. Victims often remain unaware of the fraud until they visit banks, emphasising the need for improved awareness and security measures.</p>

<p class="text-align-justify">Experts suggest limiting Aadhaar sharing, scrutinising CSP operators, and implementing multi-factor authentication in AePS to curb this rising threat.</p>


With AePS, individuals don't need to visit a bank or possess an ATM card for transactions. Instead, they can go to a Customer Service Point (CSP) or a business correspondent.


AePS was introduced by the Indian government in 2014 to bring banking services to remote areas lacking traditional banks

Scammers have found a way to exploit AePS

They withdraw money from victims' accounts, leaving them unaware until they visit the bank

explainers

 Scammers can clone your fingerprint for fraud: What you need to know & how to protect yourself

Scammers using Aadhaar to clone fingerprints, here’s how

<p>A Delhi-based doctor, Pradeep Chowdhury, lost a significant amount of money after falling <a href="Beware of AI voice scams: Woman loses Rs 1.4 lakh in devastating AI voice scam">victim to a digital scam</a> while attempting to seek a refund from a cab service provider. This incident serves as a stark reminder of the importance of exercising caution when interacting with online entities, especially when sharing personal information.</p>

<p>Chowdhury's ordeal began when he took a cab to Gurgaon for work. The initial fare estimate was Rs 205, but upon reaching his destination, the app displayed a fare of Rs 318, an additional Rs 113. Unsure about the discrepancy, Chowdhury questioned the cab driver, who advised him to contact the cab company's customer care for a refund.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text"><strong>Also Read</strong></div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/metaverse/story/bits-pilani-offers-degree-on-metaverse-platform-to-6600-students-714475-2023-11-21">BITS Pilani: Over 6,600 professionals get their degree on the Metaverse platform, a first-of-its-kind event in India</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<p>Following the driver's suggestion, Chowdhury searched online for the customer care number and came across a seemingly legitimate number. Upon dialing the number, he was connected to an individual posing as a customer care representative. Chowdhury explained the situation and requested a refund for the overcharged amount.</p>

<p>The call was then redirected to another individual claiming to be Rakesh Mishra, supposedly responsible for resolving customer complaints. Mishra instructed Chowdhury to download a remote sensing application and grant access to his e-wallet. He then asked Chowdhury to enter the refund amount and the first six digits of his phone number as a verification step.</p>

<p>Chowdhury, unaware of the fraudulent nature of the interaction, complied with the instructions and provided the requested information. He even shared his one-time password (OTP) upon request. Shockingly, this led to four unauthorised transactions, resulting in a financial loss of Rs 4.9 lakh.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text"><strong>Also Read</strong></div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/visualstories/news/top-3-tech-ceos-pushed-out-of-companies-just-like-sam-altman-77337-21-11-2023">These Tech CEOs Were Fired By Their Companies!</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<p>Upon realising the scam, Chowdhury immediately reported the incident to the police, and a case was registered under IPC section 420 (related to cheating) and 66 D of the IT Act. Investigators believe that scammers posted a fake customer care number online, leading Chowdhury to fall victim to their deceptive tactics.</p>

<p>The police have formed dedicated teams to investigate the case and bring the perpetrators to justice. This incident highlights the growing prevalence of digital scams and the need for individuals to remain vigilant when interacting with online entities. It is crucial to verify the authenticity of websites, phone numbers, and individuals before sharing personal or financial information.</p>


Chowdhury searched online for the customer care number and came across a seemingly legitimate number. Upon dialing the number, he was connected to an individual posing as a customer care representative.


A Delhi-based doctor fell victim to a digital scam while seeking a refund from a cab service provider

Scammers posed as customer care representatives and instructed the doctor to download a remote sensing application and grant access to his e-wallet

The doctor lost nearly Rs 5 lakh in unauthorised transactions

Delhi doctor loses Rs 5 lakh in cab refund scam

From Rs 205 to Rs 5 Lakh! Delhi doctor falls victim to online scam while seeking cab refund

<p>In the midst of the festive season travel rush, a concerning trend has emerged with criminals exploiting the holiday spirit to execute a viral airline ticket scam. The International Criminal Police Organisation (INTERPOL) has issued a warning, shedding light on the growing threat posed by scammers utilising stolen credit card details to purchase airline tickets and then reselling them at seemingly irresistible bargain prices.</p>

<h3>How the airline ticket scam operates?</h3>

<p>In this deceptive scheme, fraudsters acquire or hack credit card information to procure airline tickets. Subsequently, they advertise these tickets on professionally crafted websites or social media accounts posing as legitimate travel agencies. Victims attempting to secure these seemingly discounted tickets are then coerced into immediate payments, often through cash, bank transfers, or virtual currencies. After receiving payment, scammers send a flight booking confirmation with the original purchase details erased.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text">Also Read</div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/cybersecurity/story/chinas-new-crypto-scam-hackers-use-fake-scam-skype-app-710416-2023-11-13">Chinese cybercriminals exploit fake Skype app in new crypto phishing scheme</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3>Identifying &amp; avoiding scams</h3>

<p>The INTERPOL warns that detecting this scam is challenging due to the elaborate efforts scammers put into creating authentic-looking platforms. However, there are key indicators to watch out for:</p>

<p><strong>Unusually low ticket prices:</strong> Be cautious if the ticket price seems significantly lower than other options, as it could be a ploy to lure unsuspecting travelers.</p>

<p><strong>Last-minute departure dates:</strong> Scammers frequently sell fraudulently obtained tickets close to the departure date, aiming to exploit the time between purchase and the realisation by the cardholder.</p>

<p><strong>Payment methods:</strong> Exercise caution if asked to pay in cash or through bank transfer, as these methods offer limited protection against fraud.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text">Also Read</div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/cryptocurrency/story/cbi-exposes-massive-rs-77-crore-fraud-against-us-citizen-699127-2023-10-23">Crypto fraud crackdown: CBI exposes massive Rs 7.7 crore fraud against US citizen</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3>Ensuring safe booking practices</h3>

<p>To safeguard against falling victim to this scam, travelers are advised to:</p>

<p><strong>Opt for direct booking:</strong> Purchase airline tickets directly from the airline or through reputable travel agencies certified by relevant authorities.</p>

<p><strong>Secure online transactions: </strong>Use websites with secure payment systems, identified by "https" at the beginning of the web address, for online purchases.</p>

<p><strong>Thorough research:</strong> Verify the legitimacy of travel agencies by checking their website, reading reviews, and confirming reliable contact information.</p>

<p><strong>Review terms &amp; conditions: </strong>Prioritise reviewing the terms and conditions of any transaction, paying special attention to refund policies and associated processes.</p>

<p>In the midst of the holiday excitement, vigilance is paramount to ensure safe and joyous travels. Stay informed, be cautious, and prioritise secure booking practices to thwart the efforts of these malicious scammers.</p>


An escalating airline ticket scam is gaining traction, where criminals exploit stolen credit card information to buy tickets and subsequently peddle them at discounted rates, cautions INTERPOL.

The INTERPOL has issued a warning on the growing threat posed by scammers utilising stolen credit card details to purchase airline tickets 

Subsequently, they advertise these tickets on professionally crafted websites or social media accounts posing as legitimate travel agencies

After receiving payment, scammers send a flight booking confirmation with the original purchase details erased

Beware of rising airline ticket scam

Holiday travelers beware: Rising threat of airline ticket scam revealed by INTERPOL

Beware of rising airline ticket scam, warns INTERPOL

<p>A recent report from SlowMist, a crypto security analytics firm, has highlighted a new phishing scam emerging in China that specifically targets cryptocurrency users. The scammers exploit China's ban on international applications, taking advantage of users who search for banned applications on third-party platforms.</p>

<h3>The phishing scheme</h3>

<p>Social media applications like Telegram, WhatsApp, and Skype are commonly sought after by mainland Chinese users. The scammers create fake, cloned applications mimicking these popular platforms, embedding them with malware designed to compromise crypto wallets.</p>

<h3>Analysis of the fake Skype app</h3>

<p>The SlowMist team analysed a fake Skype application, noting its version (8.87.0.403) differed from the official version (8.107.0.215). The phishing back-end domain initially impersonated Binance, later changing to mimic a Skype domain. A user who fell victim to the scam reported a significant financial loss.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text"><strong>Also Read</strong></div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/visualstories/technology/how-to-apply-passport-online-follow-these-steps-75807-13-11-2023">How To Apply For Passport Online? Follow These Steps</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3>Malicious elements detected</h3>

<p>Upon decompiling the fake app, the security team identified tampering with the commonly used Android network framework, ‘okhttp3.’ This modified framework, designed to target crypto users, requests access to internal files and images. As many social media apps commonly request these permissions, users may unknowingly grant them.</p>

<h3>Data extraction and address manipulation</h3>

<p>Once granted access, the fake Skype app uploads sensitive information, including images, device details, user ID, and phone number, to the phishing back end. The app then actively looks for images and messages with cryptocurrency address formats, replacing legitimate addresses with malicious ones predetermined by the phishing gang.</p>

<h3>Detection &amp; counteraction</h3>

<p>During testing, SlowMist found that the wallet address replacement had ceased, and the phishing interface's back end was shut down, no longer providing malicious addresses. The team also identified specific cryptocurrency addresses linked to the scam and promptly flagged and blacklisted them.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text"><strong>Also Read</strong></div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/visualstories/technology/top-5-aqi-monitoring-apps-in-india-75770-13-11-2023">Top 5 AQI Monitoring Apps in India To Check Pollution Levels</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3>Financial impact</h3>

<p>The SlowMist team discovered that a TRON chain address received approximately 192,856 USDT until 8 November, with a total of 110 transactions. Simultaneously, an ETH chain address received about 7,800 USDT in 10 deposit transactions.</p>

<p>Crypto users in China are advised&nbsp;to exercise caution and be vigilant against phishing scams. Staying informed about the latest threats and being cautious when downloading applications can help protect against potential financial losses and unauthorised access to sensitive information.</p>

<p>SlowMist's proactive measures, including flagging and blacklisting, contribute to the ongoing efforts to combat such fraudulent activities.</p>


SlowMist exposes a rising phishing threat in China targeting cryptocurrency users. By capitalising on the nation's ban on international apps, cybercriminals exploit users seeking banned applications, specifically social media platforms like Telegram, WhatsApp, and Skype. 


Scammers are exploiting China's ban on international applications to target crypto users

The scammers are creating fake, cloned applications that are embedded with malware

Crypto users in China need to be cautious and vigilant against phishing scams

China's new crypto scam: Hackers use fake Skype app

Chinese cybercriminals exploit fake Skype app in new crypto phishing scheme

<p>The world's largest bank, Industrial &amp; Commercial Bank of China Ltd. (ICBC), faced a crippling cyberattack, leaving its U.S. unit unable to process significant U.S. Treasury trades. The aftermath forced ICBC to resort to an unconventional solution—sending vital settlement details via a USB stick.</p>

<p>ICBC's U.S. unit fell victim to a cyberattack believed to be orchestrated by the Lockbit gang linked to Russia. The attack disrupted market activities, forcing ICBC to use a messenger with a USB stick to relay crucial settlement details.</p>

<p>Market-makers, brokerages, and banks experienced immediate disruptions, rerouting trades with uncertain timelines for the restoration of normalcy. Cybersecurity firm Truesec, emphasised the global impact, stating,&nbsp;</p>

<blockquote class="at-quotes">
<p>This is a true shock to large banks around the world.</p>

<div class="author">Marcus Murray</div>
</blockquote>

<p>&nbsp;</p>

<h3>Ransomware confirmation</h3>

<p>ICBC's Beijing headquarters held urgent meetings with the U.S. division and regulators to assess the situation. The bank confirmed a ransomware attack on its ICBC Financial Services unit but assured that the bank's head office and overseas units, including the New York branch, were unaffected.</p>

<p>Ransomware attacks involve encrypting a victim's data and demanding payment, often in cryptocurrency, for its release. It's a form of cyber extortion where access to files or systems is held hostage until a ransom is paid.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text"><strong>Also Read</strong></div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/cybersecurity/story/china-cyberspace-administration-has-blocked-alibabas-livestreaming-platform-for-vulgar-content-704559-2023-11-02">China's cyberspace administration targets vulgar content on Alibaba-owned platforms</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3>Cybersecurity concerns</h3>

<p>The incident underscores the growing threat of cyberattacks on crucial components of the financial system. Mattias Wahlen from Truesec highlighted potential weaknesses in ICBC's defences, suggesting a need for enhanced security measures.</p>

<p>As the Securities and Exchange Commission works on proposals to reduce financial risks, the incident emphasises the importance of cybersecurity in an increasingly digital banking landscape.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text"><strong>Also Read</strong></div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/cybersecurity/story/ai-technology-of-creating-deep-fake-is-raising-big-concerns-for-child-abuse-and-has-raise-concerns-in-european-union-the-uk-watchdog-has-raised-concern-for-this-700090-2023-10-25">AI-Driven child exploitation imagery poses a grave online threat; UK watchdog issues urgent warning</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3>Financial system</h3>

<p>ICBC's cyber ordeal serves as a stark reminder of the vulnerability of global financial systems to cyber threats. With cybersecurity concerns at the forefront, the banking industry faces an urgent call to fortify defences and ensure the resilience of critical infrastructure against potential future attacks.</p>


The biggest Chinese bank in the U.S., ICBC, gets hacked. They couldn't finish lots of U.S. Treasury trades because the systems got disconnected. The cyberattack caused disruptions for them.

ICBC's U.S. unit faced a ransomware attack, impacting operations

ICBC used a USB stick to transmit crucial settlement details amidst the cyber crisis

The incident emphasises global repercussions, underscoring the urgency for enhanced cybersecurity in banking

Worlds largest bank ICBC faces cyberattack

World's largest bank forced to use USB stick for trading after cyberattack cripples its network

Cybersecurity crisis hits world's largest bank

<p>CAC has taken strict action against Alibaba-owned search engine Quark and livestreaming platform NetEase for what it deems vulgar content. This move is part of the Chinese government's ongoing efforts to ensure a cleaner online environment.</p>

<p>Quark faced a fine of 500,000 Yuan (approximately US$68,340), while NetEase was required to suspend updates on a channel specialising in dancing content for seven days. Both companies were instructed to conduct comprehensive rectifications and hold responsible individuals accountable for the content.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text"><strong>Also Read</strong></div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/cybersecurity/story/ai-technology-of-creating-deep-fake-is-raising-big-concerns-for-child-abuse-and-has-raise-concerns-in-european-union-the-uk-watchdog-has-raised-concern-for-this-700090-2023-10-25">AI-Driven child exploitation imagery poses a grave online threat; UK watchdog issues urgent warning</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3>Reasons behind the action</h3>

<p>The CAC stated that Quark's search results displayed obscene and pornographic information, and it recommended explicit keywords to users. Meanwhile, NetEase was accused of live broadcasting accounts with vulgar language, actions, and pornographic material, as well as linking to such content on its homepage.</p>

<h3>Protection of minors &amp; online accountability</h3>

<p>The CAC is also taking steps to protect minors from harmful online content, referring to them as "internet natives" who use the internet for education and entertainment. To ensure their safety, platform operators are required to implement features like a kid-friendly mode and designated time windows when potentially upsetting content won't be available to young users.</p>

<p>Additionally, major social media platforms, including WeChat, Doyin, Baidu, and Sina Weibo, have announced that influencers with over 500,000 followers must now use their real names. This measure is intended to increase responsibility among content creators, but it has sparked concerns from critics regarding privacy rights.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text"><strong>Also Read</strong></div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/cybersecurity/story/hacker-reveals-personal-information-of-815-crore-indians-data-leaked-on-dark-web-703265-2023-10-31">Unprecedented data leak: Hacker exposes 81.5 crore Indians’ personal data on Dark Web</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3>China taking action</h3>

<p>China is actively enforcing stricter regulations to maintain a safer and more responsible online environment, particularly for its younger users. These actions reflect the government's commitment to monitoring and controlling content that is accessible on digital platforms.</p>


China's internet watchdog, the Cyberspace Administration (CAC), has penalised Alibaba's search engine, Quark, and the livestreaming platform, NetEase, for featuring content it considered indecent.

China's regulators penalise Quark and NetEase for vulgar content

Quark fined 500,000 yuan; NetEase suspends updates for inappropriate content

CAC cites explicit search results and vulgar live broadcasts, taking action for a cleaner online space

CAC penalises live streaming platforms for vulgar content

China's cyberspace administration targets vulgar content on Alibaba-owned platforms

Chinese regulators take action against Aibaba’s live streaming of vulgar content

<p class="text-align-justify">In a staggering data breach incident, the personal information of 815 million Indians, potentially the largest in India's history, has been exposed on the Dark Web. This breach, brought to light by a hacker known as 'pwn0001,' is traced back to the database of the Indian Council of Medical Research (ICMR). The leaked data includes Aadhaar and passport details, names, phone numbers, and addresses. The breach has raised significant concerns about data security and privacy.</p>

<blockquote class="twitter-tweet">
<p dir="ltr" lang="en">⚠️ India Biggest Data Breach<br />
<br />
Unknown hackers have leaked the personal data of over 800 million Indians Of COVID 19.<br />
<br />
The leaked data includes:<br />
<br />
* Name<br />
* Father's name<br />
* Phone number<br />
* Other number<br />
* Passport number<br />
* Aadhaar number<br />
* Age<a href="https://twitter.com/hashtag/DataBreach?src=hash&amp;ref_src=twsrc%5Etfw">#DataBreach</a> <a href="https://twitter.com/hashtag/dataleak?src=hash&amp;ref_src=twsrc%5Etfw">#dataleak</a> <a href="https://twitter.com/hashtag/CyberSecurity?src=hash&amp;ref_src=twsrc%5Etfw">#CyberSecurity</a> <a href="https://t.co/lUaJS9ZPDr">pic.twitter.com/lUaJS9ZPDr</a></p>
— Shivam Kumar Singh (@MrRajputHacker) <a href="https://twitter.com/MrRajputHacker/status/1719017620278784504?ref_src=twsrc%5Etfw">October 30, 2023</a></blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>

<p class="text-align-justify">&nbsp;</p>

<h3 class="text-align-justify">Hacker reveals massive data leak</h3>

<p class="text-align-justify">A hacker, going by the name 'pwn0001,' has disclosed a colossal data breach affecting the personal data of 815 million Indian citizens. This revelation marks a major security incident, with sensitive information being offered on the Dark Web. The source of the leak appears to be the Indian Council of Medical Research (ICMR), which had gathered this data during COVID-19 testing.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text">Also read</div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/cybersecurity/story/ai-technology-of-creating-deep-fake-is-raising-big-concerns-for-child-abuse-and-has-raise-concerns-in-european-union-the-uk-watchdog-has-raised-concern-for-this-700090-2023-10-25">AI-Driven child exploitation imagery poses a grave online threat; UK watchdog issues urgent warning</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3 class="text-align-justify">What's at risk?</h3>

<p class="text-align-justify">The compromised data consists of a wide range of personal information, including Aadhaar and passport details, names, phone numbers, and both temporary and permanent addresses of millions of Indians. It's a substantial breach, affecting a vast portion of India's population.</p>

<h3 class="text-align-justify">Investigations &amp; concerns</h3>

<p class="text-align-justify">The breach came to public attention when the American cybersecurity and intelligence agency, Resecurity, made the initial discovery. On 9 October 2023, 'pwn0001' revealed the breach on Breach Forums, offering access to 815 million records, including ‘Indian Citizen Aadhaar &amp; Passport’ data.</p>

<p class="text-align-justify">To verify the accuracy of the exposed information, some records were cross-checked using the government's ‘Verify Aadhaar’ feature, which confirmed the authenticity of Aadhaar information.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text">Also read</div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://web3cafe-en.cms-visualstories.intoday.in/wp-admin/post.php?post=24975&amp;action=edit#page=%2522f1bd71af-ab18-4da6-ac5b-5cda241c9ccb%2522">5 Free AI Courses By Google You Should Know</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<p class="text-align-justify">The Computer Emergency Response Team of India (CERT-In) has also alerted ICMR about the breach. The challenge now lies in identifying the exact source of the breach, as the COVID-19 test information is scattered across various government bodies, including the National Informatics Centre (NIC), ICMR, and the Ministry of Health.</p>

<h3 class="text-align-justify">Previous incidents highlight concerns</h3>

<p class="text-align-justify">Earlier this year, cybercriminals hacked into the servers of AIIMS (All India Institute of Medical Sciences) and took control of over 1TB of data, demanding a substantial ransom. This forced the hospital to resort to manual record-keeping, causing significant disruptions in an already overcrowded institute.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text">Also read</div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/gaming/story/gta-6-release-date-setting-features-revealed-in-new-leaks-702724-2023-10-30">GTA 6 latest leak reveals release date, setting, and features! Here's what to expect</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<p class="text-align-justify">In a similar incident in December 2022, AIIMS Delhi fell victim to Chinese hackers who demanded a significant sum in cryptocurrency. These previous breaches underscore the pressing need for improved data security and cybersecurity measures across India's institutions.</p>

<p class="text-align-justify">In conclusion, the massive data breach in India is a stark reminder of the urgent need for enhanced data security and privacy measures. This incident serves as a wake-up call, urging authorities and organisations to prioritise the security of personal information to prevent such large-scale breaches in the future.</p>


The compromised data consists of a wide range of personal information, including Aadhaar and passport details, names, phone numbers, and both temporary and permanent addresses of millions of Indians.


Sensitive personal data belonging to 81.5 million Indian individuals has been leaked

The hacker named 'pwn0001,'made the leak known by promoting the stolen data on the Dark Web

He unveiled the breach on Breach Forums on 09 October 2023

Massive data breach exposes 81.5 Cr Indian citizens personal data on dark web

Unprecedented data leak: Hacker exposes 81.5 crore Indians’ personal data on Dark Web

81.5 Cr Indians data leaked on Dark Web, claims hacker

<p>A warning from a watchdog agency, the Internet Watch Foundation (IWF), in the UK highlights a growing problem of child sexual abuse images spreading on the internet, and it could get much worse.</p>

<p>The cause of concern is AI technology that can create fake photos, making it challenging for law enforcement to keep up. In South Korea, someone was sentenced to 2.5 years for using AI to make inappropriate images.</p>

<p>The IWF found that there was a demand for images of previously abused children, using their real content to generate more, which is deeply concerning.</p>

<p>Even kids are using similar tools to play pranks. This report sheds light on a troubling side of AI advancement, where people can describe what they want, and AI creates it, sometimes with harmful consequences.</p>

<p>Watchdog Group’s chief technology officer said&nbsp;</p>

<blockquote class="at-quotes">
<p>We're not talking about the harm it might do. This is happening right now and it needs to be addressed right now.</p>

<div class="author">Dan Sexton</div>
</blockquote>

<p>&nbsp;</p>

<blockquote class="twitter-tweet">
<p dir="ltr" lang="en">“We’re not talking about the harm [AI-generated images] might do,” said Dan Sexton, <a href="https://twitter.com/IWFhotline?ref_src=twsrc%5Etfw">@IWFhotline</a> chief technology officer. “This is happening right now and it needs to be addressed right now.”✍️<a href="https://twitter.com/mattoyeah?ref_src=twsrc%5Etfw">@mattoyeah</a> &amp; <a href="https://twitter.com/masayett?ref_src=twsrc%5Etfw">@masayett</a> <a href="https://t.co/v6UhvG24ym">https://t.co/v6UhvG24ym</a></p>
— Cat McShane (@CathMcShane) <a href="https://twitter.com/CathMcShane/status/1717087720042910019?ref_src=twsrc%5Etfw">October 25, 2023</a></blockquote>

<blockquote class="twitter-tweet">
<div id="tab-link-wrapper-plugin">
<div class="heading-text"><strong>Also Read</strong></div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/cybersecurity/story/google-is-going-to-introduce-ip-protection-for-chrome-website-users-for-there-privacy-protection-and-cybersecurity-reasons-after-previously-getting-rejected-by-sandbox-and-w3c-699995-2023-10-25">Google announces upcoming 'IP Protection' feature for Chrome Browser</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<p>&nbsp;</p>
</blockquote>
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>

<h3>The perils of AI-generated deep fake photos</h3>

<p>The increase in fake child sexual abuse images created through AI technology could make it harder for authorities to help real children who are in danger.</p>

<p>What's really shocking is that they're using old pictures and making new, deep-fake images of these victims. It also gives wrongdoers a tool to manipulate and harm victims by using these fake images.</p>

<p>Sexton’s charity organisation, which fights online child sexual abuse, started getting reports about bad AI-made images this year. They looked into hidden parts of the internet called the "Dark Web," which you can only access with special tools that hide your identity.</p>

<p>The IWF's report raises awareness about the AI-generated abuse issue and calls on governments, especially in the European Union, to update laws to fight it. They want to stop the reuse of old abuse photos to protect past victims.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text"><strong>Also Read</strong></div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/cybersecurity/story/ddos-attacks-along-with-a-new-cheap-attck-rapid-fast-has-destroyed-google-cloud-aws-and-cloudflare-which-in-history-has-been-a-very-big-cyberattack-and-its-a-big-cyber-security-alert-692659-2023-10-11">Record breaking DDoS attacks hit Google Cloud, AWS &amp; Cloudflare, cybersecurity on high alert</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3>Closed AI models</h3>

<p>Last year, new AI image generators amazed people by making all sorts of images. Those who produce child abuse images do not favor the widely popular AI image generators because these popular AI models include features designed to prevent the generation of such harmful content.</p>

<p>Tech providers with full control, like OpenAI's DALL-E, have been better at preventing misuse, according to Sexton.</p>


 A new report says that there could be more bad pictures of child abuse on the internet. This might happen if we don't stop AI tools that make fake photos.


There is a growing problem of AI-generated child abuse images on the internet

 AI technology challenges law enforcement efforts

OpenAI's DALL-E and closed AI models are better at blocking misuse

Children being abused by AI image generating tools

AI-Driven child exploitation imagery poses a grave online threat; UK watchdog issues urgent warning

UK watchdog issues urgent warning on AI child exploitation imagery threat

<p>Google plans to add an 'IP Protection' feature to Chrome, concealing users' IP addresses with proxy servers for privacy. They're cautious about balancing privacy and web functionality.</p>

<p>This system will adapt to evolving online needs, protecting against tracking. Users will have an optional choice to use ‘ IP Protection’ feature and if you choose to use it, it will allow you to maintain control over your online privacy, while at the same time, Google can still collect information about how you use the web.</p>

<p>Google’s ‘IP Protection' is a way of striking a balance between protecting privacy and gathering data for improving services. The rollout will depend on regional differences. Google will use its proxies for testing with limited access for US-based IP addresses.</p>

<p>Concerns include cybersecurity and distributed denial of service (<a href="https://www.web3cafe.in/web3/cybersecurity/story/ddos-attacks-along-with-a-new-cheap-attck-rapid-fast-has-destroyed-google-cloud-aws-and-cloudflare-which-in-history-has-been-a-very-big-cyberattack-and-its-a-big-cyber-security-alert-692659-2023-10-11">DDoS</a>) attacks. Google explores user authentication, protecting against linking web requests to specific accounts, and DDoS safeguards. Testing will happen from Chrome 119 to Chrome 225.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text"><strong>Also Read</strong></div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/cybersecurity/story/russian-hacker-killernet-has-claimed-to-hack-israels-government-site-which-citizens-use-for-public-services-just-after-the-attack-of-hamas-group-692150-2023-10-10">Israel's cyber defences challenged as Russian hackers breach government site</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3>IP protection feature test</h3>

<p>In the beginning, Google will use its own servers to hide your online activity and test how well it works. Initially, only people using Google Chrome in the US could use it. To make sure it's used correctly, Google will give out special access tokens, limiting how much each person can use.</p>

<p>They plan to enhance privacy with a two-step proxy system, with the second proxy from a different company, not Google. This step could offer more privacy from Google itself. Notably, Gmail and AdServices will be among the first domains tested.</p>

<h3>Google’s cybersecurity</h3>

<p>The IP Protection feature in Chrome promises to boost user privacy by blocking trackers. However, Google's focus on security measures highlights the importance of addressing potential weaknesses to ensure a safe browsing experience for Chrome users.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text"><strong>Also Read</strong></div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/cybersecurity/story/financial-firms-have-come-to-the-risk-of-video-calls-in-financial-sectors-and-retails-regulators-in-us-and-uk-and-other-firms-like-finra-sec-hbsc-have-started-monitoring-and-zoom-calls-are-also-being-696565-2023-10-18">Financial firms brace for enhanced video call regulation to protect retail investors</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3>Earlier rejections</h3>

<p>Google's efforts to enhance user privacy have faced challenges. The World Wide Web Consortium's (W3C) rejected Google's Topics <a href="https://developers.google.com/ad-manager/api/reference/v202308/ProposalService.Proposal">API proposal</a>, which was meant to replace intrusive tracking cookies.</p>

<p>In September, Google introduced Privacy Sandbox for Chrome, aiming to remove third-party tracking cookies while delivering targeted ads.</p>

<p>According to the critics, Google's system may still follow and collect information about your online activities, even though it's supposed to improve privacy. So they suggested using a different browser if you want stronger privacy protection.</p>


Google is set to launch 'IP Protection' in Chrome. It hides your IP address using proxy servers, boosting online privacy.


Google introduces 'IP Protection' in Chrome for enhanced privacy

Google emphasises security while balancing privacy for users

Chrome’s privacy protection concerns for users were rejected earlier by the W3C

Google introducing 'IP Protection' 

Google announces upcoming 'IP Protection' feature for Chrome Browser

Google to launch 'IP Protection' in Chrome Browser

<p>Guard your digital world with these essential tips! Learn how to protect yourself from online cyber frauds effectively.</p>


Guard your digital world with these essential tips! Learn how to protect yourself from online cyber frauds effectively.

cyber

Stay Safe Online: Expert Tips to Protect Yourself from Cyber Frauds!

<p>A high-severity warning about major flaws discovered in several Apple devices has been sent to Apple users by the Indian Computer Emergency Response Team (CERT-In). The seriousness of these security vulnerabilities is emphasised by this warning, which was mentioned in<a href="https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&amp;VLCODE=CIVN-2023-0303"> CERT-In's Vulnerability Note CIVN-2023-0303 </a>on 14 October 2023.</p>

<p>India's cybersecurity efforts mostly rely on CERT-In, a department within the Ministry of Electronics and Information Technology of the Government of India. It keeps an eye on the digital environment constantly and publishes vulnerability advisories to alert the public to possible risks in cyberspace.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text"><strong>Also Read</strong></div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/emerging-tech/story/whatsapp-to-introduce-view-once-voice-messages-for-enhanced-privacy-697739-2023-10-20">WhatsApp new feature: Introduces ‘View Once’ voice messages for enhanced privacy</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3>Buffer overflow problem</h3>

<p>The vulnerability found in<a href="https://www.web3cafe.in/emerging-tech/gadgets/story/whatsapp-for-ipad-now-available-here-is-how-it-works-681102-2023-09-20"> Apple's iOS and iPadOS</a> is highlighted in a released CERT-In Vulnerability Note, which also highlights the seriousness of these dangers. The WebRTC component's buffer overflow problem and the kernel component's inadequate validation are the main causes of these vulnerabilities.</p>

<p>These flaws are particularly worrying since a remote attacker could take advantage of them by sending a carefully designed request to the targeted system. If the vulnerability was successful, the attacker would have rights and be able to effectively run whatever code they wanted on the hacked device.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text"><strong>Also Read</strong></div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/visualstories/gadgets/dont-miss-out-oneplus-open-foldable-smartphone-launches-today-check-out-expected-specs-amp-price-70928-19-10-2023">OnePlus Open Foldable Smartphone Launches Today! Expected Specs and Price</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<p>In simpler terms, this means that a hacker could potentially take full control of the user's device, posing a substantial security risk.</p>

<h3>Apple devices affected</h3>

<p>A range of Apple products are affected by these flaws, including iPhones and iPads running iOS and iPadOS versions prior to 16.7.1. This covers popular gadgets including the iPhone 8 and beyond, all iPad Pro models, the third-generation iPad Air and later, the iPad 5th generation and later, and the fifth-generation iPad mini.</p>

<h3>Staying safe</h3>

<p>To protect against these vulnerabilities and maintain security, CERT-In strongly advises users to promptly apply the updates provided by Apple in their security patches.</p>

<p>Apple has already released the necessary fixes to address these vulnerabilities, and you can find the updates on Apple's official support website - <a href="https://support.apple.com/en-us/HT213972">support.apple.com/en-us/HT213972</a>.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text"><strong>Also Read</strong></div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/visualstories/technology/isim-vs-esim-know-all-differences-71149-20-10-2023">SIM vs eSIM: Which Is Better For You?</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<p>Recognising that Apple frequently provides patches and updates to address security risks is essential. By delaying the installation of these updates, hackers may be able to compromise your device.</p>

<p>Additionally, keeping your smartphone updated provides other advantages like enhanced performance, compatibility with new applications, and accessibility to new features. As a result, it is advised to maintain alertness and apply updates as soon as they become available.</p>


CERT-In alerts Apple device users about critical vulnerabilities in iOS and iPadOS. The flaws could grant attackers control over devices. Apply updates promptly to stay safe

CERT-In uncovers critical vulnerabilities in Apple iOS and iPadOS

 Apple iPhones and iPads running versions before 16.7.1 are affected

 Users are urged to install Apple's security updates promptly to mitigate risks

 Indian govt urges urgent updates for iPhones and iPads

Apple security risk: Indian govt urges users running outdated iOS versions on iPhones & iPads to update

Indian govt urges urgent updates for iPhones and iPads

<p>To comply with upcoming regulations, financial firms may have to monitor employee video calls, just as they do with text messages. Regulators in the U.S. and UK are extending their focus to boost protections for retail investors.</p>

<p>Regulators are preparing to cast a wider net when it comes to financial industry oversight. Video calls are now on their radar, with a focus on ensuring compliance and protection for retail investors.</p>

<p>The US Securities and Exchange Commission's (SEC) has issued hefty fines for communication violations and is nearing a resolution on an extensive investigation into investment advisors' breaches.</p>

<p>In anticipation of these changes, financial firms are proactively engaging technology specialists, law firms, and risk consultants to monitor and store video call records. Some major banks have already begun recording Zoom calls, signaling a shift toward more robust record-keeping practices.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text"><strong>Also Read</strong></div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/cybersecurity/story/hackers-have-claimed-to-hack-sony-systems-and-have-threatened-to-sell-the-data-as-sony-refused-to-pay-684441-2023-09-26">Hacker claims Sony Systems cyberattack, threatens to sell stolen data</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3>Navigating the video call landscape</h3>

<p>With the increased use of video calls in the finance sector, regulatory frameworks are not yet fully developed or adapted. However, the unique risks associated with visual exchanges and the limited use of technology for monitoring have prompted a call for expanded regulatory reach.</p>

<h3>HSBC's video call recording</h3>

<p>Reports suggest Hong Kong and Shanghai Banking Corporation Limited (HSBC) record client video calls, yet Reuters couldn't verify.</p>

<p>In the U.S., Financial Industry Regulatory Authority (FINRA) mandates tapping phone conversations, but it's unclear if this extends to video calls.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text"><strong>Also Read</strong></div>

<ul class="tab-link">
	<li class="editor-readmore"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/cybersecurity/story/ddos-attacks-along-with-a-new-cheap-attck-rapid-fast-has-destroyed-google-cloud-aws-and-cloudflare-which-in-history-has-been-a-very-big-cyberattack-and-its-a-big-cyber-security-alert-692659-2023-10-11">Record breaking DDoS attacks hit Google Cloud, AWS &amp; Cloudflare, cybersecurity on high alert</a></li>
</ul>

<div id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3>Evolving regulations in a digital world</h3>

<p>As technology continues to advance, the regulatory landscape will likely follow suit, striving to ensure that video calls meet the same compliance standards as traditional forms of communication. Financial firms are gearing up for a new era of oversight and accountability.</p>


Regulators want to record video calls like they do with text messages to protect retail investors, making financial firms more cautious.


Financial firms are hiring tech experts and legal help to watch and keep video call records

Regulatory rules are changing, and experts expect regulators to examine video call compliance closely

Video calls as a threat to financial sectors

Financial firms brace for enhanced video call regulation to protect retail investors

 Firms prepare for strict video call regulations

<p class="text-align-justify">In an era defined by digital convenience and instantaneous transactions, Quick Response (QR) codes have become a ubiquitous part of our daily lives. They simplify payments, offer access to exclusive deals, and bridge the gap between the physical and digital worlds. However, a darker side to this technological marvel has emerged - QR code scams.</p>

<p class="text-align-justify">Scammers are now leveraging the trust we place in these two-dimensional barcodes to deceive, defraud, and steal sensitive personal information. In this feature, we delve into what QR code scams are, how they operate, and essential tips to shield yourself from these digital traps.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text text-align-justify">Also read</div>

<ul class="tab-link">
	<li class="editor-readmore text-align-justify"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/cybersecurity/story/russian-hacker-killernet-has-claimed-to-hack-israels-government-site-which-citizens-use-for-public-services-just-after-the-attack-of-hamas-group-692150-2023-10-10">Israel's cyber defences challenged as Russian hackers breach government site</a></li>
</ul>

<div class="text-align-justify" id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3 class="text-align-justify">What are QR code scams?</h3>

<p class="text-align-justify">QR code scams involve scammers sending deceptive QR codes, resembling legitimate payment codes, to unsuspecting individuals. When these counterfeit codes are scanned, they surreptitiously install malware on the victim's device. This malicious software operates covertly, extracting personal and financial data from the target. These scams are a dangerous exploitation of the trust placed in QR codes, potentially leading to identity theft, financial loss, and privacy breaches.</p>

<drupal-entity data-caption="QR code scams: All you need to know" data-embed-button="ckeditor_image" data-entity-embed-display="view_mode:media.image" data-entity-type="media" data-entity-uuid="8c7bb1fc-06db-49ee-9526-e05a96de479d"></drupal-entity>

<h3 class="text-align-justify">How do QR code scams work?</h3>

<p class="text-align-justify">QR code scams are a malicious twist on a handy tool. Here's how they typically work:</p>

<h3 class="text-align-justify">- The deceptive QR code arrival</h3>

<p class="text-align-justify">Scammers send victims QR codes that convincingly mimic legitimate payment or promotional QR codes. The intended victim, believing it's a routine transaction, scans the code using their smartphone.</p>

<h3 class="text-align-justify">- Malware installation</h3>

<p class="text-align-justify">Upon scanning, the QR code secretly installs malware on the victim's device. This software silently infiltrates and extracts personal and financial information.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text text-align-justify">Also read</div>

<ul class="tab-link">
	<li class="editor-readmore text-align-justify"><a class="editor-rel-content" href="https://web3cafe-en.cms-visualstories.intoday.in/wp-admin/post.php?post=23402&amp;action=edit#page=%2522f1bd71af-ab18-4da6-ac5b-5cda241c9ccb%2522">Getting Emergency Alert On Mobile? Here's What It Means</a></li>
</ul>

<div class="text-align-justify" id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<h3 class="text-align-justify">- Data theft &amp; more</h3>

<p class="text-align-justify">The installed malware can lead to a series of threats, from directing users to fake websites that harvest sensitive data like login credentials to tracking their geolocation.</p>

<h3 class="text-align-justify">Protection from QR code scams</h3>

<p class="text-align-justify">The rise of QR code scams, particularly in the run-up to the festive season in India, necessitates vigilance. Here's how you can protect yourself:</p>

<p class="text-align-justify"><strong>-Trust the sender: </strong>Only scan QR codes from trusted sources. Be cautious when dealing with unfamiliar codes, especially those on stickers or provided by strangers.</p>

<p class="text-align-justify"><strong>-Keep OTPs &amp; UPI IDs secret: </strong>Never share your one-time passwords (OTPs) or Unified Payments Interface (UPI) IDs with anyone. These are sensitive pieces of information that can be exploited by scammers.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text text-align-justify">Also read</div>

<ul class="tab-link">
	<li class="editor-readmore text-align-justify"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/cybersecurity/story/ddos-attacks-along-with-a-new-cheap-attck-rapid-fast-has-destroyed-google-cloud-aws-and-cloudflare-which-in-history-has-been-a-very-big-cyberattack-and-its-a-big-cyber-security-alert-692659-2023-10-11">Record breaking DDoS attacks hit Google Cloud, AWS &amp; Cloudflare, cybersecurity on high alert</a></li>
</ul>

<div class="text-align-justify" id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<p class="text-align-justify"><strong>-Download wisely:</strong> Stick to downloading apps from official, trusted app stores. Avoid downloading applications from unknown sources.</p>

<p class="text-align-justify"><strong>-Verify web addresses:</strong> Before launching a website via a scanned QR code, your smartphone often displays the web address or URL. Make it a habit to confirm that the URL matches the brand or product in question.</p>

<h3 class="text-align-justify">Raising awareness &amp; ensuring safety</h3>

<p class="text-align-justify">Web3Cafe spoke with Nader Henein, VP Analyst, of Gartner, Inc (a research and advisory company)., and discussed how businesses can raise awareness about QR code security and protect consumers.</p>

<p class="text-align-justify">In a response, Nader stated that as cybercriminals increasingly target vendors and small businesses in India through QR code manipulation, it is essential for businesses to inform their customers about QR code security.</p>

<p class="text-align-justify">He further highlighted that in order to combat QR code scams, companies can adopt a proactive approach. Similar to how banks caution customers never to share their PINs or passwords, businesses should educate their clients about QR code safety. If they plan to use QR codes, it's essential to be specific about their purpose and timing.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text text-align-justify">Also read</div>

<ul class="tab-link">
	<li class="editor-readmore text-align-justify"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/cybersecurity/story/canadian-armed-forces-website-briefly-unavailable-due-to-a-cyberattack-by-indian-hackers-state-report-686558-2023-09-29">'Indian' hackers temporarily disrupt Canadian Army website: Report</a></li>
</ul>

<div class="text-align-justify" id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<p class="text-align-justify">Moreover, taking cues from many government organisations, companies can avoid including direct links in emails. Instead, they can instruct clients to perform a quick web search to find the official website and then proceed to log in securely.</p>

<p class="text-align-justify">For businesses intending to use QR codes, they might consider pairing them with a visually verifiable link, giving users the option to manually type in a URL or cross-check it with the URL displayed after scanning the QR code.</p>

<h3 class="text-align-justify">Consumers actions to protect themselves</h3>

<p class="text-align-justify">Speaking with Web3Cafe Nader highlighted that consumers play a pivotal role in their own protection against QR code scams. Instead of solely relying on QR codes, they can follow these steps:</p>

<p class="text-align-justify"><strong>- Google First: </strong>For added safety, consumers can start by searching for a brand, offer, or event online. This reduces the need for QR code scanning.</p>

<p class="text-align-justify"><strong>- Verify URLs: </strong>When scanning QR codes, most smartphones display the web address or URL before launching the webpage. Consumers should diligently confirm that the URL matches the brand or product they expect, thus avoiding potential traps set by scammers.</p>

<div id="tab-link-wrapper-plugin">
<div class="heading-text text-align-justify">Also read</div>

<ul class="tab-link">
	<li class="editor-readmore text-align-justify"><a class="editor-rel-content" href="https://www.web3cafe.in/web3/gaming/story/immutable-partnerships-with-aws-for-enhancing-its-gaming-ecosystem-and-providing-more-choices-for-the-game-developers-692749-2023-10-11">‘Immutable’ partners with AWS to enhance its web3 gaming ecosystem</a></li>
</ul>

<div class="text-align-justify" id="tab-video-wrapper-plugin">&nbsp;</div>
</div>

<p class="text-align-justify">To stay safe, the public is strongly advised to exercise vigilance and, if possible, minimise QR code usage. These precautionary steps can help protect consumers during this period of heightened scam activity.</p>

<h3 class="text-align-justify">Your digital vigilance is the best defence</h3>

<p class="text-align-justify">In the ever-evolving digital landscape, QR code scams represent a growing threat to personal security. However, knowledge and caution are potent shields. Remember, the power to safeguard your information lies in your hands, and a discerning eye is your greatest ally in this digital age.</p>


In a QR code scam, fraudsters email unsuspecting victims fake QR codes that look like real payment codes; when the victims scan the codes, the malware is silently installed on their devices.


QR code scams involve scammers sending deceptive QR codes, resembling legitimate payment codes, to unsuspecting individuals

Scammers send victims QR codes that convincingly mimic legitimate payment or promotional QR codes

Verify URLs when scanning QR codes, most smartphones display the web address or URL before launching the webpage

Rise of QR code scams

Beware of QR code scams! What it is & how to safeguard against it?

QR code scams: How to protect from QR code scams?

<p><span style="font-size:11pt"><span style="line-height:115%"><span style="font-family:Calibri,&quot;sans-serif&quot;">Cybersecurity plays a key role in protecting new-age technologies. The birth of new tech has also led to rise in cyber threats. Get the latest updates on cybersecurity news, hacks and how to stay protected online.</span></span></span></p>
