News

Security researcher KrebsOnSecurity recently uncovered details about a major botnet named Kimwolf, which has become one of the largest and most disruptive of its kind. The person behind Kimwolf, who uses the online handle 'Dort', is alleged to have orchestrated various cyber-attacks, including distributed denial-of-service (DDoS) attacks and harassment against individuals who disclosed vulnerabilities related to the botnet. Reports indicate that Dort's actions have escalated to severe threats, including the deployment of a SWAT team to a researcher's home. This investigation sheds light on who Dort is based on the available public information. Source: KrebsOnSecurity.

An Indore family fell victim to a sophisticated scam involving deepfake technology. Scammers used fabricated video calls depicting a family member in apparent distress, claiming kidnapping and demanding ransom. The fraudsters successfully extracted Rs 1 lakh from the victims before the deception was discovered. This incident highlights the emerging threat of deepfake videos being weaponized for extortion purposes. Authorities warn residents to verify claims through alternative means before making payments and to report such incidents immediately. Source: The Indian Express.

The Space Industry Association India and CERT-In have jointly released comprehensive cybersecurity guidelines to protect India's space ecosystem. These guidelines establish security standards and best practices for organizations operating in the space sector, addressing vulnerabilities and cyber threats specific to space infrastructure. The initiative aims to strengthen India's space security posture as the sector expands its capabilities and commercial activities. The joint effort between the industry body and the government's cybersecurity authority represents a coordinated approach to safeguarding critical space assets and data from cyber attacks. Source: PIB.

A technical analysis reveals significant inaccuracies in Windows documentation for the GetProcessHandleFromHwnd API, which was exploited in a UAC bypass vulnerability via Quick Assist. The API's documented security properties don't match its actual implementation. Claims about UI Access requirements, Windows hook usage, and user-level restrictions were found to be incomplete or incorrect. The API was first introduced in Windows Vista through oleacc.dll. Historical code analysis shows the API has evolved significantly over the years, with the Win32k kernel implementation differing substantially from documented behavior. Understanding these discrepancies is crucial for identifying potential security vulnerabilities in Windows privilege escalation attacks.

Indian citizens are becoming victims of sophisticated fraud networks operating through fake overseas job offers. Scammers lure job seekers with lucrative employment opportunities abroad, then trap them in criminal operations or extract money through various fraudulent schemes. Victims often face coercion to participate in further illegal activities or money laundering. Authorities have reported increasing cases of digital arrests—where victims are held virtually or physically threatened. These networks operate across borders, making law enforcement coordination challenging. Victims lose savings and personal data while becoming unwitting participants in larger crime syndicates. The scam highlights the vulnerability of job seekers desperate for overseas employment. Source: The Hindu.

A new phishing service named 'Starkiller' allows fraudsters to trick victims by using real login pages for popular websites. This service works by connecting users to the actual site while capturing their login credentials and multi-factor authentication (MFA) codes. As a result, victims unwittingly provide their sensitive information, which is then relayed to the real website. Traditional phishing sites are often short-lived as security measures quickly remove them, but Starkiller’s approach makes it harder for authorities to shut down these operations. Users should remain cautious and ensure they are on legitimate websites before entering any personal information. Source: [publication name].

A new wave of 'digital arrest' scams is targeting Indian citizens, exploiting fear of legal consequences to extract money and personal information. Scammers impersonate law enforcement officials, threatening victims with fake arrest warrants related to money laundering or drug smuggling. Victims are coerced into transferring funds or revealing sensitive details while being held in virtual detention. These scams exploit weaknesses in cybersecurity awareness and psychological manipulation. Authorities warn citizens to verify official communications directly with police departments and never share OTPs or banking credentials based on unsolicited calls or messages. Source: Frontline Magazine.

Large-scale ransomware attacks are creating serious problems for businesses worldwide, with India, the United States, and Europe becoming primary targets. These coordinated infection events are affecting enterprises across multiple sectors, disrupting operations and threatening data security. Organizations in these regions face escalating risks from sophisticated ransomware campaigns designed to encrypt critical systems and demand ransom payments. The incidents highlight the vulnerability of corporate infrastructure to organized cyber threats and underscore the urgent need for stronger security measures, employee training, and incident response capabilities. Businesses are urged to strengthen defenses and prepare contingency plans. Source: ET Edge Insights.

The Delhi High Court has issued a notice on a Public Interest Litigation (PIL) petition calling for a stronger regulatory framework to address the rising cases of UPI fraud in India. The court's action highlights growing concerns about financial crimes through digital payment systems. The PIL seeks intervention to establish more robust safeguards and enforcement mechanisms to protect consumers using UPI platforms. This development underscores the need for enhanced security protocols and stricter regulations governing digital payment transactions in the country. Source: LawBeat.

Delhi High Court has requested responses from the Centre, Reserve Bank of India, and National Payments Corporation of India regarding a public interest litigation aimed at establishing a comprehensive framework to prevent UPI frauds. The petition highlights growing concerns over unauthorized transactions and scams through the increasingly popular Unified Payments Interface. The court's intervention signals judicial attention to strengthening security measures and regulatory oversight in India's digital payment ecosystem. The responses from these authorities will help shape potential policy measures to protect users and reduce fraud incidents in UPI transactions. Source: ETLegalWorld.com

A new analysis examines India's approach to cyber deterrence and the complexities involved in establishing credible defensive postures against digital threats. The study explores constraints India faces in developing effective cyber deterrence mechanisms, including technical limitations, attribution challenges, and the credibility of response measures. It also assesses escalation risks that could arise from cyber conflicts in the South Asian context. The research highlights how India's cyber deterrence strategy must balance national security interests with international norms and the potential for unintended consequences in an increasingly connected digital environment. Source: NatStrat.

One-time password (OTP) scams have emerged as the most prevalent form of cyber fraud in Telangana, according to recent data analysis. The state has become a significant hub for such fraudulent activities targeting unsuspecting citizens. Cybercriminals exploit OTP-based vulnerabilities to gain unauthorized access to banking and financial accounts, leading to substantial financial losses for victims. The trend highlights the growing sophistication of fraud tactics and the urgent need for enhanced awareness among Indian consumers regarding OTP security protocols and safe digital practices. Source: Business Standard.