Beware of this Gorakhpur Fraud

March 21: Naavi.org has come to know of an activity in Gorakhpur where a BPO is offering a franchise for "Creating User Names and IDs for selected Website".  The list of such user IDs and Passwords are required to be put into an excel sheet and mailed to the scheme owner. It is reported that the BPO is even charging a fee of Rs 1 lakh for franchise for such a scheme and offering a payment of Rs 14000 per month per seat and suggesting the franchisees to pay Rs 4000 per employee and retain the balance of Rs 1 lakh per month as their profit.

Any franchisee or an employee of such a franchisee should realize that this is an apparent fraudulent activity and any person who is assisting in committing the fraud will be guilty of the offence. The victim in this case is the concerned website and the users are violating the terms and conditions of the site. The offence can be recognized under Section 66c and 66D of the ITA 2008 along with sections 84B and 84 C. The franchisor himself will be similarly liabile along with its executives under Sec 85.

This is meant for public education and people are warned that they may be part of a global fraudulent activity for which they may be imprisoned for not less than 3 years and fined.

We have come across a similar scam with 100% monthly return or 500% monthly return for a web activity and collection of membership fee by a few persons in Bangalore, Coimbatore, Delhi etc. and pursuing with the authorities for action.

Kindly keep us informed if you have any more information on this fraud by email to naavi@vsnl.com. It may help us take some follow up action.

Confessions of a CEO.. A Must Read for Corporate Executives

March 20: IS managers are never tiered of saying that the biggest challenge for them is to make the top executives comply with the IS policies. This article which appeared in infoseccynic.com is a must read for CEOs to understand the implications of ignoring IS policies. While it is so difficult for CEOs of IT companies to appreciate and comply with the IS polices which they can easily understand, we can imagine the difficulty when we ask them to comply with "Legal Requirements". Techno Legal Security Management is therefore more challenging than mere Technical Security management. The luke warm response to ITA 2008 compliance in the Indian Corporate world facing their first Clause 49 certificate release on March 31st is a case in point. We hope that the E-Mail Newsletter Cyber Laws For CxOs started by Naavi will try to address this requirement as the days go on.

The situation mentioned in the article highlights why Naavi's Theory of IS Motivation includes "Acceptance" and "Mandate" as essential ingredients of an IS Implementation plan.

The War Between Zone-h.org and E2 Labs..exposes chinks in Security Policies of the Government

March 13: The war between Zone-h.org and E2 labs has brought out some alarming concerns about the way Security Experts deal with the Indian Government. This article published in zone-h.org states that E2 Labs organized a hacking of Indian Government Websites and downloading of critical data to demonstrate to the Government the need to use their security services before getting any authorization in this regard.   ... Copy of the Article at zone-h.org : Copy of TOI article

Is Zone-h.org blocked in India? If so Why?

March 12: Some observers have pointed out that the respected security website Zone-h.org has been blocked in India. The reason why the website zone-h.org is not being accessible in India could be that it has been repeatedly raising some ethical issues on a firm called E2 Labs, a hyderabad based information security outfit which is known for conducting courses on Ethical Hacking in India. In one of the recent articles, zone-h.org had pointed out that E2 Labs appeared to have developed a project report for fund raising quoting non existent contracts with them. The said document also indicated that E2 Labs is the principal consultant of CERT-In, is going to be appointed by the Indian Defense as a security advisor etc.

Since the matter concerns the integrity of an organization that is associated or likely to be associated with Indian National Security, it is necessary for the Government of India to clarify if the statements made by E2 Labs is correct. Zone-h article  : Article in Bloggernews.net

Cost of Cyber Crimes in India

March 11: According to a Symantec study, over 66% of Indian comapnies are affected by Cyber Crimes in 2009 and the average fincancial loss was Rs 58 lakhs. Apart from these revenue losses, the average estimated loss on account of Data loss was Rs 94.56 lakhs and productivity loss of Rs 84.57 lakhs. Thus the total estimated loss on account of Cyber Crimes in Indian corporate sector is put at Rs 237.13 lakhs. Report in FE

According to US Federal Deposit Insurance Corporation, Computer scams in terms of ACH and Wire transfer frauds was US $ 25 million in the third quarter of 2009 alone. This has lead to several legal disputes in which Customers and their Bankers are locked in a battle alleging each other for negligence causing the losses. Report in Computerworld

These indicate the need for security investments and potential for Cyber Crime Insurance in India.

India on top of Botnet Infections

Mar 11: India has been amongst the top countries infected by one of the Botnets dismantled recently. This Botnet contained around 13 million infected computers in 190 different countries. Mexico, Brazil, Korea and Columbia were the other four countries in the top five. India had around 19% of infections (2.7 million computers). In US there were only 148818 infected IP addresses indicating the vast difference in the common computer security in India and US. The Botnet was identified and command system penetrated by a workgroup of international experts. One way attackers spread the malware was by sending out malicious links in instant messages on MSN Messenger, Thompson said. When a user clicked on the link, it brought up a page that appeared to be an update for Adobe Flash Player. If that page was viewed using IE 6, the malware would be automatically installed via drive-by download, requiring no user interaction. Related Report

Major Banking Fraud Busted

Mar 1:  A major Banking fraud was busted by  Cyber Crime Police of Tamil Nadu based on a complaint received from a phishing victim in Trichy. Two persons in Bangalore and one person in Chennai were arrested  for acting as conduits for the money. Report in IE : Press Release

An Axis bank Official has also been arrested in this regard in Hyderabad bringing the employees of Bank under scanner of Phishing Frauds.

---

 

Naavi.org is India's premier portal on Cyber Law. It is not only an information portal containing information on several aspects concerning Information Technology Law in India but also represents the focal point of several services around Cyber Law carried on by Naavi.

The first such service is the Cyber Law College a virtual Cyber Law education center in India which provides various courses on Cyber Law.

The second key service is the Cyber Evidence Archival center which provides a key service to help administration of   justice in Cyber Crime cases.

The third key service is the domain name look-alikes dispute resolution service which provides a unique solution for websites with similar looking domain names to co exist.

The fourth key service is the online mediation and arbitration service another unique global service.

The fifth key service is the CyLawCom service which represents the Cyber Law Compliance related education, audit and implementation assistance service.

Additionally, Naavi.org is in the process of development of four sub organizations namely the Digital Society Foundation, Naavi.net, International Cyber Law Research Center and Cyber Crime Complaints and Resolution Assistance Center. Digital Society Foundation is a Trust formed with the objective of representing the voice of Netizens in various fora and work like an NGO to protect their interests. Naavi.net is meant to develop a collaborative distributed network of LPO consultants. International Cyber Law Research Center would support research in Cyber Laws and Cyber Crime Complaints and Resolution Assistance Center would try to provide some support to victims of Cyber Crimes.

Together, Naavi.org represents a "Cyber Law Vision" that goes beyond being a mere portal. Started in 1997, when the concept of Cyber Law was new across the globe, consistent efforts over the last decade has brought Naavi.org to the beginning of "Phase 2" in which the services are ready to reach out to a larger section. This is recognized as the phase of collaborations and growth by association. Naavi.org will therefore be entering into a series of associations to develop each dimension of its vision with an appropriate partner. Individuals, Organizations and Commercial houses which have synergistic relationship with the activities of Naavi.org are welcome to join hands in commercial and non commercial projects of Naavi.org.

Naavi

---

Add Your Comments Here

---

If you would like to know  more about Naavi, the information is available here.

For Any Payments to be made to Naavi online :  Naavi_s Payment Center

RSS Subscription

BLOG POSTS