After CAA, Centre might bring population control law: Niranjan Jyoti

Several India-based firms are spoofing the World Health Organisation (WHO) by creating fake Gmail accounts and luring business leaders in disguise of informing them of latest COVID-19 announcements and hack their personal and financial information, Google has warned.

These "hack-for-hire" firms, many based in India, have been creating Gmail accounts spoofing the WHO, largely targeting business leaders in financial services, consulting, and healthcare corporations within numerous countries including, the US, Slovenia, Canada, India, Bahrain, Cyprus, and the UK.

"The lures themselves encourage individuals to sign up for direct notifications from the WHO to stay informed of COVID-19 related announcements, and link to attacker-hosted websites that bear a strong resemblance to the official WHO website," security researchers from Google's Threat Analysis Group said on Wednesday.

The sites typically feature fake login pages that prompt potential victims to give up their Google account credentials, and occasionally encourage individuals to give up other personal information, such as their phone numbers.

On any given day, Google's Threat Analysis Group (TAG) said it is tracking more than 270 targeted or government-backed attacker groups from more than 50 countries.

Last month, it sent 1,755 warnings to users whose accounts were targets of government-backed attackers.

"Our team of analysts and security experts is focused on identifying and stopping issues like phishing campaigns, zero-day vulnerabilities and hacking against Google, our products and our users," said the tech giant.

Google continues to see attacks from groups like Charming Kitten on medical and healthcare professionals, including WHO employees.

"We're seeing a resurgence in COVID-related hacking and phishing attempts from numerous commercial and government-backed attackers," said the company.

Government-backed or state-sponsored groups have different goals in carrying out their attacks: Some are looking to collect intelligence or steal intellectual property; others are targeting dissidents or activists, or attempting to engage in coordinated influence operations and disinformation campaigns.

Google said that since March, it has removed more than 1,000 YouTube channels that were part of a large campaign and behaving in a coordinated manner.

"These channels were mostly uploading spammy, non-political content, but a small subset posted primarily Chinese-language political content similar to the findings of a recent Graphika report," said the company.

Several cybersecurity firms have seen a spike in COVID-19 related scams and hacking attempts. Hackers are also creating scam sites similar to COVID-19 relief packages.

Researchers at Check Point Software Technologies revealed in mid-May that they have seen 192,000 coronavirus-related cyber-attacks per week over the past three weeks, a 30 % increase compared to previous weeks.

New Delhi, May 6: The government on Wednesday said no data or security breach has been identified in Aarogya Setu after an ethical hacker raised concerns about a potential security issue in the app.

The app is the government's mobile application for contact tracing and disseminating medical advisories to users in order to contain the spread of coronavirus.

On Tuesday, a French hacker and cyber security expert Elliot Alderson had claimed that "a security issue has been found" in the app and that "privacy of 90 million Indians is at stake".

Dismissing the claims, the government said "no personal information of any user has been proven to be at risk by this ethical hacker".

"We are continuously testing and upgrading our systems. Team Aarogya Setu assures everyone that no data or security breach has been identified," the government said through the app’s Twitter handle.

The tweet gave point-by-point clarification on the red flags raised by the hacker.

"We discussed with the hacker and were made aware of the following... the app fetches user location on a few occasions," it said, but added that this was by design and is clearly detailed in the privacy policy.

The app fetches users’ location and stores on the server in a secure, encrypted, anonymised manner - at the time of registration, at the time of self assessment, when users submit their contact tracing data voluntary through the app or when it fetches the contact tracing data of users after they have turned COVID-19 positive, it said.

On another issue that users can get COVID-19 stats displayed on the home screen by changing the radius and latitude-longitude using a script, Aarogya Setu said that all this information is already public for all locations and hence does not compromise on any personal or sensitive data.

"We thank the ethical hacker on engaging with us. We encourage any users who identify a vulnerability to inform us immediately...," it said.

Responding to Aarogya Setu's clarification, Alderson tweeted, "I will come back to you tomorrow".

New Delhi, Jun 13: About 56 per cent of children were found to have no access to smartphones which have emerged as essential tools for online learning during the coronavirus-induced lockdown, according to a new study that surveyed 42,831 students at various school levels.

The study ''Scenario amidst COVID 19 - Onground Situations and Possible Solutions'' was conducted by child rights NGO Smile Foundation with an aim of analysing the access to technology.

The findings of the study showed that 43.99 per cent of surveyed children have access to smartphones and another 43.99 per cent of students have access to basic phones while 12.02 per cent do not have access to either smartphones or basic phones.

A total of 56.01 per cent children were found to have no access to smartphones, the study said.

"Concerning television, it was noted that while 68.99 per cent have access to TV, a major chunk of 31.01 per cent does not. Hence suggesting that using smartphone interventions for enhancing learning outcomes is not the only solution," it said.

At the primary level of education (class 1 to 5) 19,576 children were surveyed while at upper primary level (class 6 to 8) 12,277 children were surveyed. At secondary level of education (class 9 to 10) 5,537 children were surveyed and at higher secondary level (class 11 to 12) 3,216 children were surveyed.

The survey based on which the study was conducted used two approaches - over the telephone wherein the NGO reached out to the children whose database it already had -- students enrolled in various education centres of the NGO -- and second was through community mobilization wherein community workers went door to door to get answers.

The survey was conducted in 23 states, including Delhi, Gujarat, Maharashtra, Karnataka, Tamil Nadu, West Bengal, Andhra Pradesh, Telangana, Uttar Pradesh, Haryana, over a period of 12 days from April 16 to April 28.

The lockdown induced by the COVID-19 pandemic in March prompted schools and colleges to move to the virtual world for teaching and learning activities. However, many experts say the digital divide in the country may turn online classes into an operational nightmare.

As per official statistics, there are over 35 crore students in the country. However, it is not clear as to how many of them have access to digital devices and Internet.

Santanu Mishra, co-founder and executive trustee, Smile Foundation, said the findings clearly show that the digital divide is a real challenge, and multiple approaches need to be implemented to cater to all across the nation.

"As an exercise before we start any programme, we do a baseline study to understand the on-ground challenges so that our programmes can bring in real work and real change. With the onset of the pandemic, following indefinite school closures, it is more important than ever to understand the situation and how can we ensure that children are given quality education. Through this, we understand that customized modules need to be built in accordance with the channel of communication," he said.