Ransomware top threat for Indians in 2021, crypto scams surge, BFSI News, ET BFSI

[ad_1]

Read More/Less


New Delhi: Cybercriminals continued to exploit people’s screen habits formed during lockdown to spread scams and ransomware was the top threat for Indians in 2021, followed by crypto scams, a new report showed on Wednesday.

Cybersecurity researchers observed a 38 per cent increase in ransomware attacks targeting consumers globally, when comparing the last five months of 2021 to the first five months of the year, whereas for India, that number stands at 65 per cent.

On the mobile side, adware and fleeceware were among the top threats, according to global security company Avast.

“The pandemic has changed nearly every aspect of everyone’s lives, and that includes the cyberworld too,” said Michal Salat, director of threat intelligence at Avast.

“Attackers’ methods are becoming more sophisticated. Cybercriminals are using techniques that make them harder to spot and carrying out more personalised cyber attacks. They are also adding new spins on tried and tested techniques, especially in social engineering type of attacks like scams,” Salat added.

Businesses globally also experienced an increased number of attacks during the June-October period to the tune of 32 per cent.

However, for India, this number was less than the global average and stood at 19 per cent.

In general, phishing attacks continued to increase during 2021.

The chances of businesses encountering phishing scams has increased globally by 40 per cent in the last five months of the year but was much lower in India with 13 per cent.

“Consumers, too, continue to be targeted by phishing scams with the increase in global (24 per cent) and India (23 per cent) figures being nearly the same,” the report noted.

This year, a wide variety of new threats aimed at profiting from or mining cryptocurrencies at users’ expenses were reported.

Some of the main ones that impacted many countries around the world were Crackonosh, and BluStealer.

In addition to Crackonosh and BlueStealer, the researchers also found cryptocurrency-stealing malware that was distributed through HackBoss, a Telegram channel which, at the time of discovery, had stolen over $560,000 from victims.

In September, the researchers found more than 19,300 Android apps that potentially exposed user data due to an incorrect configuration of the Firebase database — an Android tool that developers can use with the purpose of storing user data.

This affected a wide range of different apps, including lifestyle, fitness, gaming, food delivery and mailing apps in regions around the world.

“Cybercriminals kept up many of their tricks this year, using social engineering to spread malware to get their hands on people’s money, abusing technology such as stalkerware to violate people’s privacy or deceiving vulnerable audiences into paying for fleeceware apps or unneeded tech support,” said Salat.



[ad_2]

CLICK HERE TO APPLY

IndusInd Bank launches Indus Merchant Solutions app, BFSI News, ET BFSI

[ad_1]

Read More/Less


IndusInd Bank today launched ‘Indus Merchant Solutions’, a mobile application app.

The new application will enable merchants and retailers to undertake activities such as accept instant cashless payments on mobile phones from customers through multiple digital modes, track inventory via in-built dashboards, apply for a Point of Sale (PoS) machine to facilitate card based payments and avail small ticket business loans from the bank in a digital manner.

Current account holders of IndusInd Bank can download the ‘Indus Merchant Solutions’ app.

Soumitra Sen, Head – Consumer Bank, IndusInd Bank said, “Given the sharp rise in the number of consumers as well as merchants, who prefer transacting online, Indus Merchant Solutions is a holistic proposition that will significantly improve merchant engagement, user experience and convenience”

Currently, the app is available on smartphones with Android operating systems. It will soon be available for smartphones using the iOS operating system.

Follow and connect with us on , Facebook, Linkedin



[ad_2]

CLICK HERE TO APPLY

Trojan posing as IT refund skulking to attack Android phone bank customers, BFSI News, ET BFSI

[ad_1]

Read More/Less


A banking Trojan malware has been detected in the Indian cyberspace that is lurking to attack bank customers using Android phones and has already targeted those from more than 27 public and private sector banks, the country’s federal cyber security agency said in a latest advisory.

The phishing (a social engineering computer virus attack to steal personal data) malware is masquerading as an “income tax refund” and it can “effectively jeopardise the privacy of sensitive customer data and result in large-scale attacks and financial frauds”, the CERT-In advisory issued on Tuesday said.

“It has been observed that Indian banking customers are being targeted by a new type of mobile banking campaign using Drinik android malware,” it said.

“Drinik started as a primitive SMS stealer back in year 2016 and has evolved recently to a banking Trojan that demonstrates phishing screen and persuades users to enter sensitive banking information,” it said.

Customers of more than 27 Indian banks including major public and private sector banks have already been targeted by the attackers using this malware, the CERT-In said.

The Indian Computer Emergency Response Team or CERT-In is the federal technology arm to combat cyber attacks and guarding the cyber space against phishing and hacking assaults and similar online attacks.

The advisory describes the attack process.

The victim, it said, receives an SMS containing a link to a phishing website (similar to the website of the Income Tax Department) where they are asked to enter personal information and download and install the malicious APK file in order to complete verification.

“This malicious android app masquerades as the Income Tax Department app and after installation, the app asks the user to grant necessary permissions like SMS, call logs, contacts etc.”

“If the user does not enter any information on the website, the same screen with the form is displayed in the android application and the user is asked to fill in to proceed,” it said.

This data to be filled includes full name, PAN, Aadhaar number, address, date of birth, mobile number, email address and financial details like account number, IFS code, CIF number, debit card number, expiry date, CVV and PIN, it adds.

Once these details are entered by the user, it said, the application states that there is a refund amount that could be transferred to the user’s bank account.

When the user enters the amount and clicks “Transfer”, the application shows an error and demonstrates a fake update screen.

“While the screen for installing update is shown, Trojan in the backend sends the user’s details including SMS and call logs to the attacker’s machine,” it said.

“These details are then used by the attacker to generate the bank specific mobile banking screen and render it on user’s machine. The user is then requested to enter the mobile banking credentials which are captured by the attacker,” it said.

The advisory recommends some counter-measures to guard against such attacks and malware, like always download apps from official app stores, install appropriate Android updates and patches as and when available, use safe browsing tools, do extensive research before clicking on link provided in the message and look out for valid encryption certificates by checking for the green lock in the browser’s address bar before sharing sensitive personal data.

It also asked users to immediately report any unusual activity in their account to their bank and also send a complaint to CERT-In at incident@cert-in.org.in.



[ad_2]

CLICK HERE TO APPLY

India Post Payments Bank app: The good, the bad and the ugly

[ad_1]

Read More/Less


Post office savings schemes such as recurring deposit (RD), public provident fund (PPF) and Sukanya Smariddhi Scheme (SSY) require annual minimum/periodical contribution towards the account. An app from India Post Payments Bank (IPPB) enables investors to do online processing of such transactions instantly. Here’s a snapshot of features, pros and cons of this mobile app, which is available both on the android and iOS platforms.

Features

The on-boarding process is fairly simple if you have a KYC (know your customer)-compliant savings account with IPPB already. If you do not have such account, you can open an account too on the app using PAN, Aadhaar and registered mobile number. Note that savings account with IPPB is not the same as post office savings bank (POSB) account.

Once the IPPB account is created,the app can be used to transfer sums to your post office schemes, namely RD, PPF and SSY. The app only enables transfer and not creation of account under these schemes.

Money to this IPPB account can be transferred just like you transfer money to any other bank account. The online methods include transferring through net-banking or digital UPI payment apps such as PhonePe. One can also send money to the IPPB account from your POSB account.

Transfer to the respective post office schemes can be made by selecting the investment product displayed under the ‘post office services’ in the app. The app asks for the account number of the scheme you are investing into and your customer id with the post office.

IPPB send a notification after every successful payment transfer.

Generally, post office customers are allowed to take a loan against some of the schemes such as RD and PPF investments subject to certain conditions. The IPPB app enables users to make repayments in the case of loans taken against your recurring deposit.

Pros and cons

It is common practice that we open an account in a particular post office and then move places or towns. With PPF and SSY being long-term products, this app helps overcome the disability of having to be present in the same location or depend on agents to make the contribution.

However, IPPB app is not the only route. Payments to RD/PPF opened at post office (barring SSY) can also be made using net-banking facility provided by India Post on your POSB account. If you have opened investments in these small savings schemes with banks instead of the post office, you won’t have any problem as you can do the transfer at the click of the mouse sitting wherever you want.

One aspect in which the app stands out is user interface. On selecting a particular investment product, it displays the minimum and maximum annual limits and deposits already made by you in the current year clearly. This, along with transaction history, helps users keep a track of their investments, and avoid breaching the prescribed limits..

Further, you need not worry about maintaining any balance in the IPPB savings account since there is no minimum balance requirement.

Not allowing fund transfers to other schemes such as NSC and SCSS is a drawback of the app. Also, as mentioned, one cannot open/close the SSA, PPF or RD accounts using the app. No option to check the cumulative balance in these post office schemes is also a disappointment.

[ad_2]

CLICK HERE TO APPLY

Bank of Baroda Launches WhatsApp Banking Services, BFSI News, ET BFSI

[ad_1]

Read More/Less


Bank of Baroda announced the launch of banking services on messaging app, WhatsApp. The services offered by the bank via WhatsApp will be balance inquiry, mini statement, cheque status enquiry, cheque book request, blocking of debit card, information on Bank’s product and services, register/apply for digital products etc.

A.K. Khurana, Executive Director, said, “We are consistently working towards introducing simple and innovative banking solutions using latest technologies. With the growing prominence of social media, we believe that WhatsApp banking will offer immense convenience to our customers to meet their banking requirements.”

The key benefits engaged with the service are 24*7 availability of banking services, no additional requirement of application download, easy access and convenience to all customers, availability on both Android and iPhone at no additional service charge.

Non-customers can also use this platform for queries related to Bank’s products, services, offers, ATM & branches location. The familiarity and simplicity of the solution makes it convenient for the customers to avail banking services in a seamless manner via WhatsApp.

How to activate WhatsApp Banking services

1. Register: Save Bank’s WhatsApp Business Account Number 8433 888 777 in your Mobile Contact list

2. Send message: Send “HI” on this number using WhatsApp platform and initiate the conversation



[ad_2]

CLICK HERE TO APPLY