Best printers for Home

Best Mixer Grinder

Best wired Earphones

Best 43 Inch TV in India

Best Wi Fi Routers

Best Home Theatre in India

Smart Watch under 5000

Best Laptops for Education

Best Laptop for Students

Cybercriminals are trying to lure Indian users into revealing important personal information with a new report on Monday warning that suspicious messages asking users to submit an application for the disbursement of income tax refund have been doing the rounds, with a link that directs users to a webpage looking like the income tax e-filing web page. The targeted banks in the campaign include the <keyword id="6354731" type="UNKNOWN" weightage="20" keywordseo="state-bank-of-india">State Bank of India</keyword>, ICICI, HDFC, <keyword id="6355975" type="COMPANY" weightage="20" keywordseo="axis-bank">Axis Bank</keyword> and <keyword id="62034" type="CITY" weightage="20" keywordseo="Punjab-National-Bank">Punjab National Bank</keyword>, revealed an investigation by New Delhi-based think tank CyberPeace Foundation along with cybersecurity services firmAutobot Infosec. The suspicious links originate from the US and France, said the report, adding that the campaign is collecting personal as well as banking information from the user and getting into this type of trap could cause a massive financial loss for the users. The shared link with the SMS has no domain name and is not linked with the Indian government. All IP addresses associated with the campaign belong to some third party dedicated cloud hosting providers, said the report. The whole campaign uses plain http protocol instead of the secure https. This means anyone on the network or internet can intercept the traffic and get the confidential information in plain text to misuse against the victim. It asks users to download an application from a third party source instead of Google Playstore. The application asks to provide administrator rights and unnecessary access permissions of the device. On opening the link http://204.44.124[.]160/ITR, users are redirected to a landing page that is mostly similar to the government income tax e-filing website. On clicking the green 'Proceed to the verification steps' button, users are asked to submit personal information such as full name, PAN, Aadhar number, address, pincode, date of birth, mobile number, email address, gender, marital status and banking information like account number, IFSC code, card number, expiry date, CVV/CVC and card PIN. Additionally, the bank name is automatically detected from the IFSC code entered in the form. After submission of data, users are redirected to a page where they are asked to confirm the entered data. Clicking on the green 'confirm' button directs users to a fake banking login page almost similar to the official one. It asks for the username and password for online banking. After these details are entered, for the next step, users are asked to enter a Hint question, Answer, Profile password and CIF number. Once submitted, a mobile verification section with instructions provided to download an android application (.apk file) appears, to complete the ITR verification. Here, users are deliberately instructed to grant all device permissions to the particular application, the investigation revealed. The application, called Certificate.apk, starts downloading upon clicking the green 'Download' link. The overall layout and functionalities of the web page used in the campaign are similar to the official e-filing site to lure laymen, said the report. SEE ALSO: <a href="https://www.businessinsider.in/finance/banks/news/bank-employees-in-india-on-strike-today-and-tomorrow-but-mobile-and-net-banking-services-are-working/articleshow/81505273.cms">Bank employees on strike today and tomorrow — ATMs, net and mobile banking likely to be the only relief</a> <a href="https://www.businessinsider.in/tech/news/indias-personal-data-protection-law-versus-europes-gdpr/articleshow/81504058.cms">Being GDPR compliant doesn't necessarily make companies ready for India's upcoming data protection laws</a> <a href="https://www.businessinsider.in/business/startups/news/stripe-the-most-valued-startup-in-the-us-to-offer-payment-services-to-indias-merchants-after-its-latest-fundraise/articleshow/81504106.cms">Stripe, the most valued startup in the US, to offer payment services to India’s merchants after its latest fundraise</a>

SBI, ICICI, HDFC, Axis Bank, PNB and the Indian IT department targeted in phishing scam

The number of online transactions is growing every day and banks need to have stringent <keyword id="137092" type="UNKNOWN" weightage="100" keywordseo="cyber-security">cyber security</keyword> measures. 
 The need for broader security system increased after salary accounts of at least two dozen <keyword id="6354512" type="CITY" weightage="100" keywordseo="Infosys">Infosys</keyword> employees were hacked last month in May. 
 
Experts and company executives said told Economic Times that the hacking highlighted broader cyber security challenges for domestic banks. 
 
At least Rs 2 lakh were siphoned off from half a dozen salary accounts of Infosys employees hacked by a still unidentified person, two people familiar with the development told the financial daily. 
 <keyword id="6653" type="CITY" weightage="100" keywordseo="ICICI-bank">ICICI Bank</keyword> refunded salaries to affected employees immediately, given its longstanding relationship with Infosys, executives told ET. 
 
An ICICI spokesperson told ET that the impacted customers got their debit cards prior to December 2013 and as per the rules at the time the cards were activated for international transactions. "However, the customers had the choice of blocking international transactions on their debit cards," the spokesperson said. 
 
Since December 2013, the spokesperson informed, the bank has been issuing EMV chip debit cards to customers who make international transactions, besides giving all customers the choice to opt for cards with this global security standard. 
 
"The bank did not issue EMV chip cards to these customers as they neither transacted internationally nor did they opt for the EMV chip cards," the spokesperson told the financial daily. 
 
"This was a case of card skimming, wherein debit card information was used by the fraudsters for conducting unauthorised transactions. Debit card information may have leaked at point of sale machine or through some other channel and this led to the incident," a top executive at ICICI Bank told ET on the condition of anonymity. 
 
Meanwhile, this episode has highlighted how current online security measures in most of the public and private sector banks are inadequate to counter new-age threats. 
 
"Incidents of skimming happen because banks continue to ask simplistic questions on customer's date of birth, address, mother's maiden name, name of spouse, etc. Such information is freely and publicly available on Facebook, LinkedIn and job search portals. So fraudsters have easy access to such information. In essence, that is leading to a number of frauds; some get reported while the others don't," Sivarama Krishnan, a partner at PricewaterhouseCoopers, told ET. 
 
Meanwhile, few banks like HSBC often issue fast tokens to customers where the personal identification number changes every 30 seconds depending on the frequency that the bank sets up. 
 
Customers are then required to use a one-time password sent to their phones. A number of banks have still not enabled such a system, which drastically reduces the vulnerability of security systems, experts told ET. 
 
But Infosys was not the first case. In 2013, the Axis Bank salary accounts of 15 police officers in Mumbai were hacked and money was withdrawn from those accounts through ATMs in Greece. Axis Bank later refunded the amount to the affected officers. 
 
"Customers often give the debit card/ card details to petrol pump attendant, hotel waiter or to salesperson. Such negligent behaviour causes risks," said the chief information security officer of a leading private sector bank. 
 
Experts told ET most banks need to implement Adaptive Access systems, a new-age security solution that uses tools like analytics to thwart cyber attacks. A number of banks such as HDFC, Axis Bank and Punjab National Bank have already deployed such systems. 
 
(Image: Thinkstock)

Next time you swipe your debit card, make sure bank has strict cyber security measures

<ul><li>The new <keyword id="6355684" type="PERSON" weightage="20" keywordseo="Blockchain">blockchain</keyword> banking solution by <keyword id="6354512" type="COMPANY" weightage="20" keywordseo="Infosys">Infosys</keyword>, <keyword id="6534575" type="UNKNOWN" weightage="20" keywordseo="India-Trade-Connect">India Trade Connect</keyword>, had seven partner banks in May. </li><li>Come June, India Trade Connect now has 14 banks within its purview. </li><li>Adopting blockchain technology for banking is speculated to increase efficiency and add security to transactions.</li></ul>Initially, Infosys’ new blockchain banking solution, India Trade Connect, went <a href="https://www.businessinsider.in/indian-software-giant-infosys-sets-up-a-blockchain-trade-network-with-7-banks/articleshow/64205177.cms">live</a> with seven banks under the umbrella. Now, within the span of one month, that number has <a href="https://www.bloomberg.com/news/articles/2018-06-06/banks-turn-to-blockchain-to-speed-up-indian-internal-trade-deals">doubled</a> to fourteen India Trade Connect, formerly called Finacle Trade Connect, is a blockchain platform that helps banks with loans for trade transactions within the country. Between the 14 institutions lies more than half of India’s internal trade transactions. India isn’t alone in its impetus to adopt blockchain technology for banking. Financial institutions all over the <a href="https://www.youtube.com/watch?v=507wn9VcSAE">world</a> are looking to blockchain-oriented solutions on the basis that its digital ledger saves time, adds a layer of security and enables transparency. Despite the advantages of adopting blockchain technology, there are still a lot of questions on the table that do not have answers yet. The dark side First off, blockchain technology isn’t full proof. Hacks and scams still <a href="http://itsblockchain.com/2017/01/09/can-blockchain-be-hacked/">occur</a>. The only difference is that since the information will now be distributed instead of having a centralised point of <a href="https://www.wired.com/2017/04/hackers-hijacked-banks-entire-online-operation/?mbid=nl_4417_p3&amp;CNDID=38794715">access</a>, obtaining data would be harder and much slower. Second, there are <a href="https://www.bankingtech.com/2018/05/opinion-blockchain-is-not-only-crappy-technology-but-a-bad-vision-for-the-future/">experts</a> who are of the opinion that implementing blockchain technology in the <keyword id="34507" type="PERSON" weightage="20" keywordseo="banking-sector">banking sector</keyword> is a move in the wrong direction. It is mainly because there’s still a lot of regulatory ambiguity around the validity of blockchain data. Tampering with data may be difficult but that doesn’t necessarily mean that all data has integrity. Also, one should consider the irony that blockchain came into being as an<a href="https://www.reddit.com/r/Bitcoin/comments/7ioqy1/why_is_bitcoin_seen_as_antiestablishment/"> anti-establishment</a> piece of technology and now it’s a tool in the hands of the <a href="https://medium.com/bitclave/blockchain-goes-mainstream-f8dc4f4e90f6">mainstream</a>. Initially, the whole point of blockchain was that users wouldn’t need to use a bank anymore.

Infosys’ new blockchain banking solution doubles its partners in a month

New Delhi, May 7 () Facebook-funded education technology firm Unacademy's data comprising over 20 million accounts has been hacked by cybercriminals and put up for sale in the dark web, according to cybersecurity firm Cyble. The hackers have claimed that they have access to the complete database of Unacademy and decided to leak only users' accounts at this point of time, Cyble said. The cyber intelligence firm added that further leaks are expected in the near future. "On May 3, 2020, Cyble Inc discovered that a threat actor had begun to sell an Unacademy user database containing 20 million accounts for USD 2,000. Unacademy is India's largest online learning platform. This data breach apparently took place in January 2020," Cyble claimed. When contacted, Unacademy co-founder and Chief Technology Officer Hemesh Singh said the company has been closely monitoring the situation and claimed that no sensitive information such as financial data or location has been breached. "As per our internal investigations, e-mail data of around 11 million users has been compromised as against 22 million stated in reports. This is on account of only around 11 million e-mail data of users available on the Unacademy platform," Singh said. He said the company is following stringent encryption methods and making it highly implausible for anyone to decrypt passwords. "We also follow an OTP-based login system that provides an additional layer of security to our users. We are doing a complete background check and will be addressing any potential security loophole to further bolster our efforts of ensuring a far more robust security mechanism. We are in communication with our users to keep them updated on the progress," Singh said. Facebook, General Atlantic, Sequoia India, Flipkart CEO Kalyan Krishnamurthy, and Nexus Venture Partners have invested in the company. According to Cyble, this breach can have an impact on security of other companies as well. "Cybercriminals are always on the lookout for such breaches and utilise them for credential stuffing attacks. We have seen accounts/records with domain names from Infosys, TCS, Cognizant, Reliance Industries, HDFC, Accenture, ICICI, SBI, Canara Bank, Bank of Baroda, Punjab National Bank and several other large organisations," Cyble said. PRS HRS

Facebook-funded Unacademy data hacked, claims cybersecurity firm

The Indian government has stepped in and is going to work on a war footing in the wake of hacking of Twitter and personal accounts of Congress Vice-President <keyword id="5268" type="PERSON" weightage="20" keywordseo="Rahul-Gandhi">Rahul Gandhi</keyword>, liquor baron <keyword id="14678" type="PERSON" weightage="20" keywordseo="Vijay-Mallya">Vijay Mallya</keyword>, and senior journalists <keyword id="357957" type="PERSON" weightage="20" keywordseo="Barkha-Dutt">Barkha Dutt</keyword> and <keyword id="319216" type="PERSON" weightage="20" keywordseo="Ravish-Kumar">Ravish Kumar</keyword> by Legion group. They have also threatened to hack parliament’s website. 
 IT Minister <keyword id="6354886" type="PERSON" weightage="20" keywordseo="Ravi-Shankar-Prasad">Ravi Shankar Prasad</keyword> has called for an audit of entire IT infrastructure and ordered review of the financial sector starting immediately with the National Payment Corporation of India (<keyword id="193629" type="CITY" weightage="20" keywordseo="NPCI">NPCI</keyword>), review of the IT Act to make it stronger and setting up a crack team to respond to unusual incidents on a war footing. 
 
The government has also asked Twitter and payment wallets to strengthen their network. NPCI is an umbrella organisation for all retail payments system in India. 
 
"There is huge traffic flowing through the IT platforms, if there is any mishap, the systems have to be resilient and we have to take appropriate measures. We have to be alert, there is nothing to be scared of," said Prasad. 
 
A meeting was also called of bankers and more than 50 officers from IDFC, ICICI, SBI, Canara Bank, etc attended it. 
 
"We have sought details from all the people whose accounts have been hacked and Twitter has also been asked to strengthen its security and to pay attention to any unusual movement," Prasad told ET.

Govt orders audit of IT infrastructure after Legion group hacks multiple accounts

<ul><li>The market for hacking, which is also a part of cyber security, is expected to create 3.5 million jobs globally by 2025, <a href="https://www.thehindu.com/education/a-look-at-the-opportunities-offered-by-ethical-hacking/article33502004.ece">according</a> to a report by Cybersecurity Ventures cited by the New York Times.</li><li>Tons of opportunities are now open for freshers, as well as professionals, as the demand is up significantly.</li><li>Career options you can go for after doing a professional course in Ethical hacking, according to UpGrad.</li></ul>An ethical hacker working in a private firm can expect to earn around ₹6,00,000 per annum. Whereas, a freelancer can expect to earn around ₹60,000 per month, according to <a href="https://www.glassdoor.co.in/Salaries/ethical-hackers-salary-SRCH_KO0,15.htm">Glassdoor.</a> The word hacking implies breaking into the system and database. An ethical hacker tests the level of security in any system by trying to break into it with the permission of the owner. Hacking, which is also a part of cyber security, the market in India is expected to grow from $4.3 billion in 2019 to $7.6 billion in 2022, <a href="https://www.thehindu.com/education/a-look-at-the-opportunities-offered-by-ethical-hacking/article33502004.ece">according</a> to the Data Security Council of India. The market for hacking, which is also a part of cyber security, is expected to create 3.5 million jobs globally by 2025, <a href="https://www.thehindu.com/education/a-look-at-the-opportunities-offered-by-ethical-hacking/article33502004.ece">according</a> to a report by Cybersecurity Ventures cited by the New York Times. Tons of opportunities are now open for freshers, as well as professionals, as the demand is up significantly. If you are looking for online courses that could help you get these, <a href="https://www.businessinsider.in/careers/news/top-online-courses-for-ethical-hacking-jobs-in-cyber-security/slidelist/84966456.cms">here’s a recently compiled list</a>. These are career options you can go for after doing a professional course in Ethical hacking, according to UpGrad — 1. Government / Private Firms/ Freelancer Government as well as private organisations constantly search for ethical hackers who can help them in protecting their organisation from cyber attacks and threats. An individual can also work as a freelancer for any company in this field. The key responsibility of a hacker is to identify the vulnerabilities and fix them. <a href="https://www.monsterindia.com/job/ethical-hacking-specialist-vodafone-india-3751283?searchId=125dd01c-fe19-45fe-89e9-5966b56cb024">Vodafone</a>, <a href="https://careers.wipro.com/careers-home/jobs/2559846?lang=en-us&amp;utm_campaign=google_jobs_apply&amp;utm_source=google_jobs_apply&amp;utm_medium=organic">Wipro</a>, <a href="https://jobs.smartrecruiters.com/Visa/743999763989444-cyber-security-engineer?trid=2d92f286-613b-4daf-9dfa-6340ffbecf73&amp;source=Linkedin">Visa</a>, <a href="https://jobs.dell.com/job/karnataka/senior-information-security-analyst-information-security-analyst/375/19462220?utm_campaign=google_jobs_apply&amp;utm_source=google_jobs_apply&amp;utm_medium=organic">Dell</a> are hiring ethical hackers and cyber security specialists. 2. Network Security Engineers A network security engineer is responsible for handling the maintenance and integration of the corporate Wide Area Network, Local Area Network and others as well. They also look after the implementation and administration of network security hardware and software. <a href="https://jobs.intel.com/ShowJob/Id/2949781/Information-Security-Engineer/?utm_campaign=google_jobs_apply&amp;utm_source=google_jobs_apply&amp;utm_medium=organic">Intel</a>, <a href="https://careers.microsoft.com/professionals/us/en/job/953849/Senior-Security-Engineer?utm_campaign=google_jobs_apply&amp;utm_source=google_jobs_apply&amp;utm_medium=organic">Microsoft</a>, <a href="https://jobs.apple.com/en-in/details/200232164/sap-cybersecurity-engineer">Apple</a>, <a href="https://jobs.ericsson.com/job/Noida-Infrastructure-Security-Engineer-UP/728407802/?utm_campaign=google_jobs_apply&amp;utm_source=google_jobs_apply&amp;utm_medium=organic">Ericsson</a>, <a href="https://in.linkedin.com/jobs/view/network-security-engineer-at-wipro-technologies-2661211545?refId=Vr98lx050zhp9%2BLY9mzTZg%3D%3D&amp;trackingId=gLYjT/U2DUZHwz0yXabuMQ%3D%3D&amp;utm_campaign=google_jobs_apply&amp;utm_source=google_jobs_apply&amp;utm_medium=organic">Wipro</a> are hiring Network Security Engineers. 3. Security Consultant The key responsibility of a security consultant is to evaluate the existing IT systems and infrastructures and develop and implement IT security solutions to prevent any data loss, unauthorized access. <a href="https://careers.microsoft.com/us/en/job/1019076/Consultant-Cybersecurity-Forensic-Analyst?jobsource=linkedin&amp;utm_source=linkedin&amp;utm_medium=linkedin&amp;utm_campaign=linkedin-feed">Microsoft</a>, <a href="https://careers.ibm.com/job/13454921/security-consultant-identity-access-management-bangalore-in/?codes=IBM_CareerWebSite">IBM</a>, <a href="https://careers.hpe.com/job/Hewlett-Packard-Enterprise-Bangalore-Karnataka/155279683?utm_campaign=google_jobs_apply&amp;utm_source=google_jobs_apply&amp;utm_medium=organic">Hewlett Packard (HP)</a>, <a href="https://www.accenture.com/in-en/careers/jobdetails?id=359784_india_1&amp;utm_campaign=google_jobs_apply&amp;utm_source=google_jobs_apply&amp;utm_medium=organic">Accenture</a> are hiring Security Consultants. 4. Penetration Tester A penetration tester breaks into the system and finds possible exploits in computer systems and software. They are also responsible to plan and design penetrative tests and advise management on security improvements. <a href="https://razorpay.recruiterbox.com/jobs/fk03os7/">Razorpay</a>, <a href="https://jobs.thomsonreuters.com/job/12379295/lead-penetration-tester-bangalore-in/">Reuters</a>, <a href="https://careers.ibm.com/job/12649440/lead-penetration-tester-ethical-hacker-bangalore-in/?codes=SN_LinkedIn&amp;Codes=SN_LinkedIn">IBM</a>, <a href="https://careers.wipro.com/careers-home/jobs/2677635?lang=en-us&amp;utm_campaign=google_jobs_apply&amp;utm_source=google_jobs_apply&amp;utm_medium=organic">Wipro</a> are hiring Penetration Testers. 5.Network Security Administrator The network security administrator is responsible for writing network security policies and performs frequent audits to ensure that the policies are correctly implemented. <a href="https://in.linkedin.com/jobs/view/network-security-admin-l2-at-tata-consultancy-services-2633748967?utm_campaign=google_jobs_apply&amp;utm_source=google_jobs_apply&amp;utm_medium=organic">Tata Consultancy Services</a>, <a href="https://careers.ibm.com/job/12994114/network-admin-gurgaon-in/?codes=IBM_CareerWebSite">IBM</a>, <a href="https://career.infosys.com/jobdesc?jobReferenceCode=INFSYS-External-103808-2&amp;sourceId=4003">Infosys</a>, <a href="https://in.linkedin.com/jobs/view/network-security-engineer-at-oracle-india-pvt-ltd-2665876025?refId=ZjmaC75ki2rnXGFg3E5DLg%3D%3D&amp;trackingId=//ojEYwGpYEyPQeXbsqMeQ%3D%3D&amp;utm_campaign=google_jobs_apply&amp;utm_source=google_jobs_apply&amp;utm_medium=organic">Oracle</a> are hiring Network Security Administrators SEE ALSO: <a target="_blank" class="c-link c-message_attachment__title_link" href="https://www.businessinsider.in/careers/news/banking-jobs-hdfc-axis-icici-and-other-banks-are-hiring-across-the-country/articleshow/84666214.cms">Banking jobs: HDFC Bank, Axis Bank, ICICI Bank and more are hiring across the country for various roles</a> <a target="_blank" class="c-link c-message_attachment__title_link" href="https://www.businessinsider.in/careers/news/google-amazon-ibm-paytm-cognizant-hiring-business-analysts-across-the-country/articleshow/84847736.cms">Google, Amazon, IBM and many more are hiring business analysts across the country</a>

You Searched For "icici bank hacked" and got 6 results

SBI, ICICI, HDFC, Axis Bank, PNB and the Indian IT department targeted in phishing scam

IANS

Next time you swipe your debit card, make sure bank has strict cyber security measures

BI India Bureau

Infosys’ new blockchain banking solution doubles its partners in a month

Prabhjote Gill

Facebook-funded Unacademy data hacked, claims cybersecurity firm

PTI

Govt orders audit of IT infrastructure after Legion group hacks multiple accounts

BI India Bureau

Cyber security jobs: Big companies like Apple, Microsoft, Intel, TCS are hiring professionals

Vaamanaa Sethi

Popular Keywords

Buying Guides