#FactCheck-Old Photo of Kareena Kapoor Khan Falsely Shared as Fresh Pregnancy Claim

Executive Summary:

On July 4, 2024, a giant password dump,  “RockYou2024” was posted on a cybercrime marketplace containing 9,948,575,739 plain-text credentials. This blog explains the technical aspects of this leakage and its consequences in the sphere of information security. 

RockYou2024 is a list of passwords obtained from different data breaches ranging over the course of more than twenty years. It integrates older passwords with the lexical database with the additional passwords from the recent hacks, thereby, cumulating the database of genuine and existing passwords. The compilation is said to contain data from more than 4,000 databases putting the tool in the hands of potential attackers. RockYou owns the name to this type of attack since a data breach attacked a social media company named , “RockYou'' and released  3.2 million users’ passwords as a .txt file. Since then, the term gained a common meaning connected with mass password data breaches. 

Technical Implications:

• Credential Stuffing Attacks: The RockYou2024 list comprises a great number of actual passwords that increases the likelihood of credential stuffing attacks. With this, the attackers help themselves with an opportunity to try to gain unlawful access into several online accounts that a user may have, particularly ones where an individual re-uses the same password. 

• Brute-Force Attacks: The collection is extensive for brute force attack on systems that have no protection against such exercise. This is especially the case for devices and services that are exposed to the internet and which may use either weak or factory-set alphanumeric codes. 

• Password Cracking: Web compilations that include such lists are often employed by security specialists and penetration testers who use John the Ripper or Hashcat to check the password’s strength or the system’s susceptibility to attacks. 

• Machine Learning Models: The dataset could be used to create machine learning models for password prediction or analysis, which would only lead to further better methods to be used in the attacks. 

Countermeasures / Mitigation:

Below are the technical risk/process operating proposed to reduce the risks associated with RockYou2024: 

• Password Hashing: It is necessary to ensure that all the passwords required to be saved should be encrypted in one of the most secure algorithms like bcrypt, Argon2, or PBKDF2 along with a reasonable number of iterations. 

• Salt and Pepper: The features for both salting and peppering should also be enabled to complicate the cracking of passwords even after the hashed password databases have been procured. 

• Multi-Factor Authentication (MFA): Ensure the usage of complex passwords in addition to deploying MFA across all the technological systems and services within the company. 

• Password Strength Policies: Adhere to  password policies for features  like the length, strength of the passwords and the change in password frequency. 

• Rate Limiting and Account Lockouts: Inactivity methods must be used on consecutive attempts to log in and to the temporary lock out after so many attempts in a bid to discourage brute force attacks. 

• Monitoring and Alerting: There should be measures in place to monitor for any violations such as login tappings or a form of credential stuffings and there should be alerts, where securities risks are likely to arise, in real time. 

• API Security: The following proper API security measures that will result in the prevention of the following attacks; rate limiting, input validation, and token. 

• Web Application Firewalls (WAF): To defend against threats from the internet for potential credential stuffing or brute-forcing the authentication process, utilize WAFs to operate at the application layer. 

Analyzing the Impact:

To understand the potential impact of RockYou2024, organizations should assess the possible effects of RockYou2024, such as: 

• Conduct Password Audits: LeakYou2024 scan current passwords database with RockYou2024 (in ethical and safe methods) and see which accounts have been compromised. 

• Implement Continuous Monitoring: If this is a monthly or weekly event then there must be new information on data breaches and act on it concerning new security changes. 

• Educate Users: Continued security consciousness training, regarding the effective protection of an individual’s password in combination with a password generator. 

• Perform Penetration Testing: It is suggested to conduct penetration testing at least twice a year to find out if there are vulnerabilities in the systems and applications in the current use. 

Conclusion:

The RockYou2024 leaked password database is a serious security risk; it contains almost 10 billion account credentials. This unprecedented leak further increases the exposure to credential stuffing, brute force and password cracking attacks. To deal with these threats, organizations need to have measures that include password hashing, multi-factor authentication, password strengthening and password audit. Patching, user awareness, bandit activities are imperative to prevent future invasions and strengthen the cyber security posture.

References :

• https://statanalytica.com/blog/rockyou-2024-txt-password/
• https://dig.watch/updates/rockyou2024-password-leak-exposes-nearly-10-billion-unique-passwords
• https://complexdiscovery.com/rockyou2024-leak-nearly-10-billion-passwords-exposed-heightening-cybersecurity-risks-for-businesses/

‍

Executive Summary

A video is being widely shared on social media claiming to show a helicopter's thermal camera capturing hundreds of crocodiles hidden along the Amazon River at night. The footage appears to show a thermal imaging view of a river and its banks, where hundreds of crocodiles can allegedly be seen. Users claim the video was recorded using night-vision/thermal imaging technology over the Amazon River. CyberPeace Research Wing’s research found the claim to be false. The research revealed that the viral video is not authentic but has been generated using artificial intelligence (AI) and is being circulated with a fabricated claim.

‍

Claim

‍

Social media users are sharing the video claiming that it shows a thermal camera recording of hundreds of crocodiles in and around the Amazon River at night. The post link and screenshot are provided below.

https://www.instagram.com/reel/DalJ41bIezV/?utm_source=ig_web_button_share_sheet

https://www.instagram.com/reel/DalJ41bIezV/?utm_source=ig_web_button_share_sheet

https://archive.ph/pTtDN 

‍

‍

Fact Check

To verify the claim, we extracted several keyframes from the viral video and conducted a reverse image search using Google Lens. However, we found no credible news reports, authentic videos, or reliable sources confirming that the footage was recorded over the Amazon River.

We then conducted a detailed visual analysis of the video. The footage exclusively shows crocodile-like figures spread across the river and its banks, while no other aquatic animals or natural environmental activity—normally expected in a river ecosystem of that scale—are visible. These inconsistencies raised further doubts about the video's authenticity.

As part of our verification, we analysed the video using the AI detection tool Hive Moderation. The analysis indicated a 95.7% probability that the video was AI-generated.

‍

‍

As part of our verification, we analysed the video using the AI detection tool Hive Moderation. The analysis indicated a 95.7% probability that the video was AI-generated.

‍

Conclusion

‍

Our research found that the viral video does not show a genuine thermal-camera recording of the Amazon River. The footage was created using artificial intelligence and is being circulated online with a false and misleading claim.

‍

Introduction

In today's era of digitalised community and connections, social media has become an integral part of our lives. we use social media to connect with our friends and family, and social media is also used for business purposes. Social media offers us numerous opportunities and ease to connect and communicate with larger communities. While it also poses some challenges, while we use social media, we come across issues such as inappropriate content, online harassment, online stalking, account hacking, misuse of personal information or data,  privacy issues, fake accounts, Intellectual property violation issues, abusive and dishearted content, content against the terms and condition policy of the platform and more. To deal with such issues, social media entities have proper reporting mechanisms and set terms and conditions guidelines to effectively prevent such issues and by addressing them in the best possible way by platform help centre or reporting mechanism.

‍

The Role of Help Centers in Resolving User Complaints:

The help centres are established on platforms to address user complaints and provide satisfactory assistance or resolution. Addressing user complaints is a key component of maintaining a safe and secure digital environment for users. Platform-centric help centres play a vital role in providing users with a resource to seek assistance and report their issues.

‍

Some common issues reported on social media:

‍

• Reporting abusive content: Users can report content that they find abusive, offensive, or in violation of platform policies. These reports are reviewed by the help centre.
• Reporting CSAM (Child Sexual Abuse Material): CSAM content can be reported to platform help centre. Social media platforms have stringent policies in place to address such concerns and ensure a safe digital environment for everyone, including children.
• Reporting Misinformation or Fake News: With the proliferation of misinformation online, users can report content that they find or suspect misleading or false information and Fact-checking bodies are employed to assess the accuracy of reported content.
• Content violating intellectual property rights: If there is a violation or infringement of any intellectual property work, it can be reported on the platform. 
• Violence of commercial policies: Products listed on social media platforms are also needed to comply with the platform’s  Commercial Policies.

‍

Submitting a Complaint to the Indian Grievance Officer for Facebook:

A user can report his issue through the below-mentioned websites:

• https://www.facebook.com/help/contact/278770247037228

• https://www.facebook.com/help/263149623790594

‍

The user can go to the Facebook Help Center, where go to the "Reporting a Problem” section, then by clicking on Reporting a Problem, Choose the Appropriate Issue that best describes your complaint. For example, if you have encountered inappropriate or abusive content, select the ‘I found inappropriate or abusive content’ option.

‍

Here is a list of issues which you can report on Facebook:

• My account has been hacked.
• I've lost access to a page or a group I used to manage.
• I've found a fake profile or a profile that's pretending to be me.
• I am being bullied or harassed.
• I found inappropriate or abusive content.
• I want to report content showing me in nudity/partial nudity or in a sexual act.
• I (or someone I am legally responsible for) appear in content that I do not want to be displayed.
• I am a law enforcement official seeking to access user data.
• I am a government official or a court officer seeking to submit an order, notice or direction.
• I want to download my personal data or report an issue with how Facebook is processing my data.
• I want to report an Intellectual Property infringement.
• I want to report another issue.

‍

Then, describe your issues and attach supporting evidence such as screenshots, then submit your report. After submitting a report, you will receive a confirmation that your report has been submitted to the platform. The platform will review the complaint within the stipulated time period, and users can also check the status of their filed complaint. Appropriate action will be taken by platforms after reviewing such complaints. If it violates any standard policy, terms & conditions, or privacy policies of the platform, the platform will take down that content or will take any other appropriate action.

‍

Conclusion: 

It is important to be aware of your rights in a digital landscape and report such issues to the platform. It is essential to understand how to report your issues or grievances on social media platforms effectively. By using the help centre or reporting mechanism of the platform, users can effectively file their complaints on the platform and contribute to a safer and more responsible online environment. Social media platforms have their compliance framework and privacy and policy guidelines in place to ensure the compliance framework for community standards and legal requirements. So, whenever you encounter an issue on social media, report it on the platform and contribute to a safer digital environment on social media platforms.

‍

References: 

• https://www.cyberyodha.org/2023/09/how-to-submit-complaint-to-indian.html
• https://transparency.fb.com/en-gb/enforcement/taking-action/complaints-handling-process/
• https://www.facebook.com/help/contact/278770247037228
• https://www.facebook.com/help/263149623790594

‍