Sharjah ruler promises to release 149 Indian prisoners

New Delhi, Jun 3: Over 1 lakh scanned copies of Indians' national IDs, including Aadhaar, PAN card and passport, have been put on dark web for sale, cyber intelligence firm Cyble said on Wednesday.

The leaked data seems to have originated from a third party and not from the government system, according to a report by Cyble.

"We came across a non-reputed actor who is currently selling over 1 lakh Indian National IDs on the dark net. With such a low reputation, ideally, we would have skipped this; however, the samples shared by the actor intrigued our interest -- and also the volume. The actor is alleged to have access to over 1 lakh IDs from different places in India," Cyble said.

The personal data leaked by cyber criminals leads to various nefarious activities such as identity thefts, scams, and corporate espionage. Many criminals use the personal details in the IDs to win trust of the people over a phone call for fraudulent activities.

Cyber criminals leak personal data of 2.9 cr job-seeking Indians on dark web for free

The Cyble researchers acquired around 1,000 IDs from the seller and confirmed that the scanned IDs belong to Indians.

"Preliminary analysis suggests that the data originated from a third party, and no indication or artefact is indicating that it came from a government system. At this point, Cyble researchers are still investigating this further -- we are hoping to share an update soon," Cyble said.

The scanned ID documents indicate that the data may have been leaked from a company's data base in the segment where they have to comply with 'Know Your Customer' (KYC) norms.

"Cyble researchers have also learned about a surge in KYC and banking scams -- leaks such as this are often used by scammers to target individuals, especially elderlies," Cyble said.

The cyber intelligence firm has recommended people to refrain from sharing personal information especially financial information over phone, e-mail or SMS.

"Regularly monitor your financial transaction, if you notice any suspicious transaction, contact your bank immediately," the company said.

In May, Cyble showed two instances where personal data of 7.65 crore Indians have been put on sale in the dark web. In one instance, the seller claimed to have sourced data of 4.75 crore Indians from online directory Truecaller and in other, the seller claimed to have sourced from job websites.

Truecaller, however, had denied the claim of breach in its database.

Mar 30: the UAE Cabinet approved a series of new initiatives, foremost among which was the automatic extension of residence permits expiring from March 1.

The residence visas would be extended for a renewable period of three months without any fees to ease the economic impact of the Covid-19 crisis on residents, official news agency WAM reported.

The Cabinet has also waived the administrative fines associated with infractions on the services provided by the Federal Authority of Identity and Citizenship, starting April 1 and lasting for a renewable period of three months.

The initiatives also entail granting a temporary license to use digital solutions for remotely notarising and completing judicial transactions.

Government services expiring from March 1 will also be extended from April 1 for a renewable period of three months. The decision applies to all federal government services, including documents, permits, licenses and commercial registers.

The UAE has introduced a slew of initiatives to control the spread of the Covid-19 virus, including the online renewal of driving licences and vehicle’s registration cards.

The country’s telecom regulator, Telecommunications Regulatory Authority (TRA), also issued a directive that no mobile service with expired ID documents will be disconnected or suspended in the UAE.

The UAE has reported a total of 611 Covid-19 infections and five related deaths in the country.

A national sterilisation programme is underway that will continue until Saturday April 4, concluding on the morning of Sunday, April 5.

Carried out daily from 8pm until 6am the following morning, the programme will include the disinfection of private and public facilities.