#FactCheck- AI Video Fuels False Claims of Israeli Soldiers’ Death in Plane Crash

Introduction 

As various technological developments enable our phones to take on a greater role, these devices, along with the applications they host, also become susceptible to greater risks. Recently, Zimperium, a tech company that provides security services for mobiles and applications from threats like malware, phishing, etc., has announced its identification of a malware that is targeted toward stealing information from Indian Banks. The Indian Express reports that data from over 25 million devices has been exfiltrated, making it increasingly dangerous, just going by the it has affected so far.

Understanding the Threat: The Case of FatBoyPanel 

A malware is a malicious software that is a file or a program, intentionally harmful to a network, server, computer, and other devices. It is also of various types; however, in the context of the aforementioned case, it is a Trojan horse i.e., a file/program designed to trick the victim into assuming it to be a legitimate software program that is trying to gain access. They are able to execute malicious functions on a device as soon as they are activated post-installation. 

The FatBoyPanel, as it is called, is a malware management system that carried out a massive cyberattack, targeting Indian mobile users and their bank details. Their modus operandi included the process of social engineering, wherein attackers posed as bank officials who called their target and warned them that if no immediate action was taken to update their bank details, their account would be suspended immediately. On panicking and asking for instructions, they were told to download a banking application from the link sent in the form of an Android Package Kit (APK) file (that requires one to enable “Install from Unknown Sources” ) and install it. Various versions of similar incidents were acted on by other attackers, all to trick the target into downloading the file sent. The apps sent through the links are fake, and once installed, they immediately ask for critical permissions such as access to contacts, device storage, overlay permissions (to show fake login pages over real apps), and access to SMS messages (to steal OTPs and banking alerts). This aids in capturing text messages (especially OTPs related to banks), read stored files, monitor app usage, etc. This data is stolen and then sent to the FatBoyPanel backend, where hackers are able to see real-time data on their dashboard, which they can further download and sell.  FatBoyPanel is a C&C (command and control) server that acts as a centralised control room.

Protecting Yourself: Essential Precautions in the Digital Realm 

Although there are various other types of malware, how one must deal with them remains the same. Following are a few instructions that one can practice in order to stay safe:

• Be cautious with app downloads: Only download apps from official app stores (Google Play Store, Apple App Store). Even then, check the developer's reputation, app permissions, and user reviews before installing.
• Keep your operating system and apps updated: Updates often include security patches that protect against known vulnerabilities.
• Be wary of suspicious links and attachments: Avoid clicking on links or opening attachments in unsolicited emails, SMS messages, or social media posts. Verify the sender's authenticity before interacting.
• Enable multi-factor authentication (MFA) wherever possible: While malware like FatBoyPanel can sometimes bypass OTP-based MFA, it still adds an extra layer of security against many other threats. 
• Use strong and unique passwords: Employ a combination of uppercase and lowercase letters, numbers, and symbols for all your online accounts. Avoid reusing passwords across different platforms.
• Install and maintain a reputable mobile security app: These apps can help detect and remove malware, as well as warn you about malicious websites and links (Bitdefender, etc.)
• Regularly review app permissions and give access judiciously: Check what permissions your installed apps have and revoke any that seem unnecessary or excessive. 
• Educate yourself and stay informed: Keep up-to-date with the latest cybersecurity threats and best practices.

Conclusion 

The emergence of malware management systems indicates just how sophisticated the attackers have become over the years. Vigilance at the level of the general public is recommended, but so are increasing efforts in awareness regarding such methods of crime, as people continue to remain vulnerable in aspects related to cybersecurity. Sensitive information at stake, we must take steps to sensitise and better prepare the public to deal with the growing landscape of the digital world.

References

• https://zimperium.com/blog/mobile-indian-cyber-heist-fatboypanel-and-his-massive-data-breach
• https://indianexpress.com/article/technology/tech-news-technology/fatboypanel-new-malware-targeting-indian-users-what-is-it-9965305/ 
• https://www.techtarget.com/searchsecurity/definition/malware 

‍

Introduction

On April 30, 2025, the Supreme Court of India delivered a landmark judgment that cast a sharp light on one of the most overlooked yet pressing issues in modern governance—digital inequity. In a country that has a staggering 900 million Internet users, the ruling highlights a disheartening reality, a paradox that brings the “digital divide” to centre stage. While India may be the world’s second-largest online market, a significant segment of its population remains digitally disenfranchised. The judgment, delivered in response to two interconnected petitions, underscored that access to the internet is no longer a luxury but a lifeline integral to exercising fundamental rights. The court pointed out in clear terms that the government must build a digital ecosystem that is inclusive and accessible to all and attributed the right to digital access as an intrinsic part of the right to life and liberty under Article 21 as enshrined under the Indian Constitution. 

Understanding the Context: What Prompted the Petitions? 

The judgment springs out of two writ petitions, which sought instructions or guidelines for people with blindness or limited vision and acid attack survivors, respectively, to conduct digital Know Your Customer (KYC)/e-KYC/video KYC mandated by RBI’s KYC Master Directions, 2016, which were reserved for judgment on January 28. The court delivered the judgment on April 30, 2025, emphasising the fact that true inclusion in this digital era is confounded in an inclusive digital infrastructure, and it must provide reasonable accommodation to those who face impediments due to any disability or disfigurement. 

In consonance with its view, it laid down various guidelines that ensure that all persons with disabilities or acid attack survivors are treated even when digital processes are involved in accordance with the provisions of the Right of Persons with Disabilities Act, 2016 (hereinafter referred to as “RPwD Act”)

Another major observation made by the Honourable SC judges is that the mode of facilitation of government services is through digital platforms, i.e., e-governance, and access to all these welfare schemes is the right of every citizen, irrespective of the fact that they suffer from any disability. The failure of the provisioning of e-governance of these facilities to these individuals is a gross failure of the objectives of these schemes. 

Key Observations and Directives

The court directed the government to release fresh guidelines that establish alternative methods to conduct digital KYC/e-KYC for all persons who suffer any impairment, low vision, or disfigurement with greater sensitivity, particularly for acid-attack survivors. The court made its intention very clear that the right to digital access is intrinsic to the right to life and liberty. All the tasks that are included within the ambit of digital KYC, such as pen-on-paper signatures, screen signatures, and the brief window for OTP entry, create an inaccessible and exclusionary framework, violating not just the dignity but the legal rights granted protection under the RPwD Act, 2016. The ruling directs a fundamental reimagining of digital governance through the lens of inclusion, equality, and dignity. 

Conclusion

The court is not mincing its words when it declares digital accessibility as a constitutional imperative; it has made it clear that bridging the digital divide is no longer optional but a legal duty. The decision marks the new beginning and a propeller of digital transformation, and a delightful amalgamation of digital access and the rights of people. The effect of this judgment will not be restricted to one class of people. Still, it will cater to all those individuals who face these obstacles on a daily basis due to the exclusionary nature of digital platforms. 

References

• https://www.livelaw.in/supreme-court/right-to-digital-access-part-of-article-21-supreme-court-directs-to-make-ekyc-process-accessible-to-persons-with-disabilities-290778

‍

Introduction

It’s a proud moment for Indians that India will host the G- 20 administration, which will bring the world’s 20 largest profitable nations together on a single platform during the post-economic recovery and the Russia- Ukraine conflict, which has increased geopolitical pressures among nations over the last many times and made the G- 20 a precedence of nations. With this administration, India has to make cybersecurity precedence, as the security and integrity of the critical structure and digital platforms are top precedence in 2023. The necessity for a secure cyberspace is pivotal given the exponential increase in the volume and kind of cyber-attacks, particularly to crucial structures the most recent illustration is the ongoing interruption at New Delhi’s All India Institute of Medical lores caused by a ransomware assault. It has been observed that the mode of attacks are more sophisticated and targets communication structure, critical structure, transport systems, and especially the information technology sector and fiscal system.

The structure that enables the delivery of government services to be more effective. As a result,cyber-secured critical structures and digital public forums are necessary for public security,  bettered governance, and, most importantly, maintaining people’s trust.   The G20 can be enhanced and contribute towards securing digital public platforms and the integrity of the critical structure. This time, in 2023, digital security is the top precedence.

G20 cybersecurity enterprises and politic sweat

The emphasis on cybersecurity was maintained throughout the Italian and Indonesian regulations in 2021 and 2022, independently, by emphasizing the significance of cyberspace during Digital Economy Working Group addresses. Specifically, under the Indonesian Presidency, the prominent cybersecurity focus was clear in the recent Bali Leaders’ protestation, which noted, among other effects, the significance of fighting misinformation juggernauts and cyber attacks, as well as guaranteeing connectivity structure security.  The cyber incident report by the Financial Stability Board on carrying further uniformity in cyber incident reporting  In 2016, a G20 digital task force was created under the Chinese administration to understand digital technology issues.  Under the Saudi administration, the cybersecurity gap at the G20 was bridged by addressing the issues of MSMs. India has also refocused on the significance of creating secure, secure, and stronger-friendly digital platforms.

G20- India’s digital invention alliance( G-20-DIA) a cyber-secure Bharat  

• Under India’s administration, the G20’s Digital Economy Working Group is led by the Ministry of Electronics and Information Technology( MeitY, DEWG).
• The Ministry concentrated on three major areas during India’s G20 administration digital skill development, digital public structure, and cyber security.
• The EWG’s DIA and Stay Safe Online enterprise further the ideal of lesser digital metamorphosis by guaranteeing a safe and creative cyber terrain. They want to offer a smooth and secure delivery of public services.

The G20 Digital Innovation Alliance

(G20- DIA) strives to find, admit, and encourage the relinquishment of innovative and poignant digital technologies produced by invited G20 startups and-member governments.

• These technologies must meet humanity’s conditions in six crucial areas husbandry, health, education, finance, secure digital structure, and indirect frugality.
• The inventions created around these motifs will be supported by the Digital Public Goods structure, allowing them to be espoused encyclopedically, closing the digital gap and icing sustainable and indifferent growth.
• The G20 Digital Innovation Alliance( G20- DIA) conference will be held on the perimeters of the Digital Economy Working Group( DEWG) meeting in Bengaluru.
• Top-nominated entrepreneurs from each order will present their ideas to a worldwide community of investors, instructors, pots, and other stakeholders at this event.

India’s” Stay Safe Online crusade”    

The” Stay Safe Online” crusade attempts to raise mindfulness about the significance of remaining safe in the online world amid our adding reliance on it. With the fast expansion of the technical terrain and the growing number of internet druggies in India, new difficulties are arising. The Stay Safe Online crusade aims to educate individuals about cyber pitfalls and how to avoid them. The time-long crusade will target children, women,  scholars, and aged citizens, as well as individuals with disabilities,  preceptors, and government officers in particular. It’ll be done in Hindi, English, and indigenous languages to reach a larger followership. It’ll distribute mindfulness information in infographics, short pictures, cartoon stories, and so on through extensively employed social media platforms and other channels. The primary stakeholders will be government agencies, civil societies, and NGOs.

Conclusion

To wind up, it can be said that cyber security has become the most essential part of transnational affairs. As India hosts the G20 administration in 2023, the docket relating to cybersecurity gains a global stage, where cyber-related issues are addressed and honored encyclopedically, and nations can combat these issues;  also, India aims to raise cyber mindfulness among its citizens.