The Government Crackdown on Digital Arrest
Introduction
The Government of India has initiated a cybercrime crackdown that has resulted in the blocking of 781,000 SIM cards and 208,469 IMEI (International Mobile Equipment Identity) numbers that are associated with digital fraud as of February 2025. This data was released as a written response by the Union Minister of State for Home Affairs, Bandi Sanjay Kumar, with respect to a query presented in the Lok Sabha. A significant jump from the 669,000 SIM cards blocked in the past year, efforts aimed at combating digital fraud are in full swing, considering the increasing cases. The Indian Cyber Crime Coordination Centre (I4C) is proactively blocking other platform accounts found suspicious, such as WhatsApp Accounts (83,668) and Skype IDs (3,962) on its part, aiding in eliminating identified threat actors.
Increasing Digital Fraud And The Current Combative Measures
According to the data tabled by the Ministry of Finance in the Rajya Sabha, the first 10 months of the Financial year 2024-2025 have recorded around 2.4 million incidents covering an amount of Rs. 4,245 crore involving cases of digital Financial Fraud cases. Apart from the evident financial loss, such incidents also take an emotional toll as people are targeted regardless of their background and age, leaving everyone equally vulnerable. To address this growing problem, various government departments have dedicated measures to combat and reduce such incidents. Some of the notable initiatives/steps are as follows:
- The Citizen Financial Cyber Fraud Reporting and Management System- This includes reporting Cybercrimes through the nationwide toll-free (1930) number and registration on the National Cyber Crime Reporting Portal. On being a victim of digital fraud, one can call the toll-free number, describing details of the incident, which would further help in the investigation. After reporting the incident, the complainant receives a generated login ID/acknowledgement number that they can use for further reference.
- International Incoming Spoofed Calls Prevention System- This is a mechanism developed to counter fraudulent calls that appear to originate from within India but are actually made from international locations. This system prevents the misuse of the Calling Line Identity (CLI), which is manipulated to deceive recipients in order to carry out financial crimes like digital arrests, among other things. Coordinating with the Department of Telecommunication (DoT), private telecommunication service providers (TSPs) are being encouraged to check with their ILD (International Long-Distance) network as a measure. Airtel has recently started categorising such numbers as International numbers on their part.
- Chakshu Facility at Sanchar Saathi platform- A citizen-centric initiative, created by the Department of Telecommunications, to empower mobile subscribers. It focuses on reporting unsolicited commercial communication (spam messages) and reporting suspected fraudulent communication. (https://sancharsaathi.gov.in/).
- Aadhaar-based verification of SIM cards- A directive issued by the Prime Minister's Office to the Department of Telecommunications mandates an Aadhaar-based biometric verification for the issuance of new SIM cards. This has been done so in an effort to prevent fraud and cybercrime through mobile connections obtained using fake documents. Legal action against non-compliant retailers in the form of FIRs is also being taken.
On the part of the public, awareness of the following steps could encourage them on how to deal with such situations:
- Awareness regarding types of crimes and the tell-tale signs of the modus operandi of a criminal: A general awareness and a cautionary approach to how such crimes take place could help better prepare and respond to such malicious scams. Some important signs on the part of the offender include pressuring the victim into immediate action, insistence on video calls, and the threat of arrest in case of non-compliance. It is also important to note that no official authority, in any legal capacity, allows for enabling a digital/online arrest.
- Knowing the support channels: Awareness regarding reporting mechanisms and cyber safety hygiene tips can help in building cyber resilience amongst netizens.
Conclusion
As cybercrooks continue to find new ways of duping people of their hard-earned money, both government and netizens must make efforts to combat such crimes and increase awareness on both ends (systematic and public). Increasing developments in AI, deepfakes, and other technology often render the public inept at assessing the veracity of the source, making them susceptible to such crime. A cautionary yet proactive approach is need of the hour.
References
- https://mobileidworld.com/india-blocks-781000-sim-cards-in-major-cybercrime-crackdown/
- https://www.storyboard18.com/how-it-works/over-83k-whatsapp-accounts-used-for-digital-arrest-blocked-home-ministry-60292.htm
- https://www.business-standard.com/finance/news/digital-financial-frauds-touch-rs-4-245-crore-in-the-apr-jan-period-of-fy25-125032001214_1.html
- https://www.business-standard.com/india-news/govt-blocked-781k-sims-3k-skype-ids-83k-whatsapp-accounts-till-feb-125032500965_1.html
- https://pib.gov.in/PressReleasePage.aspx?PRID=2042130
- https://mobileidworld.com/india-mandates-aadhaar-biometric-verification-for-new-sim-cards-to-combat-fraud/
- https://pib.gov.in/PressReleaseIframePage.aspx?PRID=2067113
Related Blogs
Executive Summary:
We have identified a post addressing a scam email that falsely claims to offer a download link for an e-PAN Card. This deceptive email is designed to mislead recipients into disclosing sensitive financial information by impersonating official communication from Income Tax Department authorities. Our report aims to raise awareness about this fraudulent scheme and emphasize the importance of safeguarding personal data against such cyber threats.
Claim:
Scammers are sending fake emails, asking people to download their e-PAN cards. These emails pretend to be from government authorities like the Income Tax Department and contain harmful links that can steal personal information or infect devices with malware.
Fact Check:
Through our research, we have found that scammers are sending fake emails, posing as the Income Tax Department, to trick users into downloading e-PAN cards from unofficial links. These emails contain malicious links that can lead to phishing attacks or malware infections. Genuine e-PAN services are only available through official platforms such as the Income Tax Department's website (www.incometaxindia.gov.in) and the NSDL/UTIITSL portals. Despite repeated warnings, many individuals still fall victim to such scams. To combat this, the Income Tax Department has a dedicated page for reporting phishing attempts: Report Phishing - Income Tax India. It is crucial for users to stay cautious, verify email authenticity, and avoid clicking on suspicious links to protect their personal information.
Conclusion:
The emails currently in circulation claiming to provide e-PAN card downloads are fraudulent and should not be trusted. These deceptive messages often impersonate government authorities and contain malicious links that can result in identity theft or financial fraud. Clicking on such links may compromise sensitive personal information, putting individuals at serious risk. To ensure security, users are strongly advised to verify any such communication directly through official government websites and avoid engaging with unverified sources. Additionally, any phishing attempts should be reported to the Income Tax Department and also to the National Cyber Crime Reporting Portal to help prevent the spread of such scams. Staying vigilant and exercising caution when handling unsolicited emails is crucial in safeguarding personal and financial data.
- Claim: Fake emails claim to offer e-PAN card downloads.
- Claimed On: Social Media
- Fact Check: False and Misleading
Introduction
As the world seemingly shrinks under the vast, ever-stretching canopy of the internet, the channels through which information flows are becoming increasingly enigmatic and tangled. In the digital world, the gulf between fact and fabrication narrows dramatically, with the veracity of information too often lost in the flood. Amidst the torrents of data, platforms like YouTube, a veritable Goliath in the video streaming sphere, are finding themselves at the forefront of a critical battle against the dark forces of fake news and disinformation—a war that is waged with the intensity of any historical conflict over truth and influence.
It is in this volatile theatre that Google's video behemoth, YouTube, under the scrutiny of the global eye, announces its strategic campaign to shield against the onslaught of misinformation. With India, the world's most populous democracy, on the cusp of its monumental general elections, the stakes could hardly be higher. YouTube's involvement thus evolves beyond corporate social responsibility—it becomes a crusade for the integrity of information, a paladin for the democratic process, and a protector of the public’s right to factual reporting.
The Campaign
The campaign envisioned by YouTube India's vanguard is multifaceted and robust, aimed at rooting out the insidious tendrils of fake news where they lie. At the heart of this mission are two pivotal strategies that form the backbone of YouTube's defense. Firstly, a rigorous misinformation policy, which heralds as a bastion against content designed with duplicitous intent. YouTube Indian Head Ishan Chatterjee elucidates, 'Our misinformation policies clearly state that if the content has been technically manipulated with the intent to deceive a user and there's a danger of real-world harm...we will act against that content.' It is an exhortation of YouTube's commitment to a culture of truth and an acknowledgement of the platform's influence and responsibility. This process, however, is more complex than it appears; it is tangled in socio-political nuances and demands an uncompromising vigilance to identify and dispel falsehoods.
Yet, this is merely the foundation upon which YouTube’s strategy rests. The second prong of their stratagem is even more ambitious—intending not only to eradicate the chaff of misinformation but also to till the soil with the seeds of verifiable, authoritative news content. This is an initiative to resuscitate the public's faith in digital information sources. By allying with credible news publishers and fostering a symbiosis with independent journalists, YouTube has taken up the mantle of an institution that not just police content, but cultivates it, transforming the barren desert of online falsehoods into an oasis of enlightenment.
News on YouTube is symbiotic with the larger consciousness of its users, driving content consumption and engaging millions who seek out current affairs, investigative reports, and in-depth analysis on the platform. The democratisation of news, once the hallowed ground of traditional broadcast and print media, now finds its theatre online. Chatterjee insightfully notes the ascending trend of news story engagement on YouTube Shorts and Connected TV (CTV)—two emergent platforms that have revolutionised content delivery and consumption. CTV, in particular, has skyrocketed in popularity within the past five years, boasting over 58 million viewers in India consuming YouTube content from the comfort of their living rooms as of June 2023, per analytics.
This phenomenon is acutely observed by YouTube's Director and Global Head of Responsibility, Tim Katz, who delineates a portrait of the Indian market's distinctive hunger for live content, particularly news, on CTV. Katz's observations carry an air of fascination, 'The other two things that have been exciting to see are that we've seen a lot of growth, particularly during sensitive moments, with large news stories occurring certainly during an election cycle, and we just see very large growth from many of our authoritative partners.'
The Implications of the Campaign
The tapestry of YouTube's news ecosystem is a rich mosaic of diversity, including independent journalists, broadcasters, legacy print publications, and digital-first media organisations. Katz underscores the gravity of nurturing such a broad and dynamic news environment on the platform, a gesture of YouTube's commitment to a holistic information landscape.
An illuminating report from the Google News Initiative, forged in cooperation with Kantar, reiterates the dominance of video as the consummate medium for news consumption across a spectrum of languages and formats in India. It paints a picture of a nation of insatiable news consumers, with nearly every second Indian language internet user engaging with news content, a substantial proportion hailing from urban locales. Of particular resonance is hyperlocal news, which plucks the chords of local interests and concerns, touching the lives of seven out of ten citizens.
Moreover, the economic impetus behind YouTube’s role in the media firmament is brought to light in the Oxford Economics Impact Report, revealing a staggering 70% of Indian media and music companies with a YouTube presence acknowledge the platform as a crucial revenue stream.
Conclusion
Poised upon the sharp edge of an electric election season—a season that will no doubt be drenched in a spectrum of information, both fact and fable—YouTube's convictions stand as a beacon of reliability. Their initiative is more than a method—it's a philosophy, a dedication to purifying the information sphere. In the digital epoch, where the battle lines for truth are drawn in bytes and bandwidth, YouTube’s rallying cry for responsibility, its vow to safeguard democratic ideals, and its unyielding commitment to illuminating the corridors of knowledge are more than strategies; they are pillars on which a well-informed, engaged, and enlightened citizenry can lean.
Reference
Introduction
Devices and interconnectivity are the pipelines which drive the data into cyberspace, and in turn, the users consume this data to perform different tasks in the digital age. The security of devices and networks is essential as they are the first defenders of cyberspace. Bad actors often target systems and networks with malware and ransomware, these attacks are differently motivated, but all wreak havoc upon the system and can impact individuals and organisations alike. Mobile users worldwide prefer iOS or Android, but both operating systems are vulnerable to cyberattacks these days. Some of these attacks go undetected for a long time.
Op Triangulation
As reported by Kaspersky, While monitoring the network traffic of their own corporate Wi-Fi network dedicated to mobile devices using the Kaspersky Unified Monitoring and Analysis Platform (KUMA), Kaspersky noticed suspicious activity that originated from several iOS-based phones. Since it is impossible to inspect modern iOS devices from the inside, they created offline backups of the devices in question, inspected them using the Mobile Verification Toolkit’s mvt-ios and discovered traces of compromise. This is known as Operation Triangulation and has been in action since 2019 and got detected in 2023.
The Malware
A portion of the filesystem, including some of the user data and service databases, is included in mobile device backups. The files, directories, and database entries’ timestamps make it possible to reconstruct the events that happened to the device roughly. The “timeline.csv” file created by the mvt-ios software contains a sorted timeline of events that is comparable to the super-timeline utilised by traditional digital forensic tools. Pinpointing particular artefacts that show the compromise using this timeframe. This made it possible to advance the research and reassemble the broad infection sequence:
Through the iMessage service, a message with an attachment containing an exploit is delivered to the target iOS device.
The message initiates a vulnerability that results in code execution without any user input.
The exploit’s code downloads multiple additional stages, including additional exploits for privilege escalation, from the C&C server.
After successful exploitation, a fully functional APT platform is downloaded as the final payload from the C&C server.
The first message and the attachment’s exploit are removed
The lack of persistence support in the harmful toolset is most likely a result of OS restrictions. Multiple devices’ timeframes suggest that after rebooting, they might get infected again. The earliest signs of infection that we found date to 2019. The most recent version of the devices that have been successfully attacked as of the time of writing in June 2023 is iOS 15.7.
The final payload analysis is still ongoing. The programme executes with root rights, implements a set of commands for gathering user and system data, and can run any code downloaded as plugin modules from the C&C server.
Malicious Domains
Using the forensic artefacts, it was possible to identify the domain name set used by the exploits and further malicious stages. They can be used to check the DNS logs for historical information and to identify the devices currently running the malware:
addatamarket[.]net
backuprabbit[.]com
businessvideonews[.]com
cloudsponcer[.]com
datamarketplace[.]net
mobilegamerstats[.]com
snoweeanalytics[.]com
tagclick-cdn[.]com
topographyupdates[.]com
unlimitedteacup[.]com
virtuallaughing[.]com
web-trackers[.]com
growthtransport[.]com
anstv[.]netAns7tv[.]net
Safeguards for iOS users
Despite its world-class safety and privacy architecture, iOS is vulnerable to a few attacks; the following steps can be undertaken to safeguard iOS users –
Keeping Device updated
Security patches
Disabling iMessage would prevent Zero clicks exploits or the Triangulation attacks
Paying zero attention to unwanted, unsolicited messages
The user should make sure that any application they are downloading or installing; it should be from a trusted source ( This Zero click attack does not occur by any other means, It exploits / it targets software vulnerabilities in operating systems networks and applications)
Being cautious with the messaging app and emails
Implement device restrictions (management features like parental control and restrictions over using necessary applications)
Conclusion
Operation Triangulation is one of the recent operations combating cyber attacks, but such operations are launched nearly daily. This is also due to a rapid rise in internet and technology penetration across the world. Cyberattacks have taken a new face as they have evolved with the new and emerging technology. The influence of the Darknet has allowed many hackers to remain on the black hat side due to easy accessibility to illegal tools and material over the dark net, which facilitates such crimes.
