Editor, TV channel head arrested over defermatory content against Adityanath

Jun 27: Alittle-known Indian IT firm offered its hacking services to help clients spy on more than 10,000 email accounts over a period of seven years.

New Delhi-based BellTroX InfoTech Services targeted government officials in Europe, gambling tycoons in the Bahamas, and well-known investors in the United States including private equity giant KKR and short seller Muddy Waters, according to three former employees, outside researchers, and a trail of online evidence.

Aspects of BellTroX's hacking spree aimed at American targets are currently under investigation by U.S. law enforcement, five people familiar with the matter told Reuters. The U.S. Department of Justice declined to comment.

Reuters does not know the identity of BellTroX's clients. In a telephone interview, the company's owner, Sumit Gupta, declined to disclose who had hired him and denied any wrongdoing.

Muddy Waters founder Carson Block said he was "disappointed, but not surprised, to learn that we were likely targeted for hacking by a client of BellTroX." KKR declined to comment.

Researchers at internet watchdog group Citizen Lab, who spent more than two years mapping out the infrastructure used by the hackers, released a report that BellTroX employees were behind the espionage campaign.

"This is one of the largest spy-for-hire operations ever exposed," said Citizen Lab researcher John Scott-Railton.

Although they receive a fraction of the attention devoted to state-sponsored espionage groups or headline-grabbing heists, "cyber mercenary" services are widely used, he said. "Our investigation found that no sector is immune."

A cache of data reviewed by Reuters provides insight into the operation, detailing tens of thousands of malicious messages designed to trick victims into giving up their passwords that were sent by BellTroX between 2013 and 2020. The data was supplied on condition of anonymity by online service providers used by the hackers after Reuters alerted the firms to unusual patterns of activity on their platforms.

The data is effectively a digital hit list showing who was targeted and when. Reuters validated the data by checking it against emails received by the targets.

On the list: judges in South Africa, politicians in Mexico, lawyers in France and environmental groups in the United States. These dozens of people, among the thousands targeted by BellTroX, did not respond to messages or declined comment.

Reuters was not able to establish how many of the hacking attempts were successful.

BellTroX's Gupta was charged in a 2015 hacking case in which two U.S. private investigators admitted to paying him to hack the accounts of marketing executives. Gupta was declared a fugitive in 2017, although the U.S. Justice Department declined to comment on the current status of the case or whether an extradition request had been issued.

Speaking by phone from his home in New Delhi, Gupta denied hacking and said he had never been contacted by law enforcement. He said he had only ever helped private investigators download messages from email inboxes after they provided him with login details.

"I didn't help them access anything, I just helped them with downloading the mails and they provided me all the details," he told Reuters. "I am not aware how they got these details but I was just helping them with the technical support."

Reuters could not determine why the private investigators might need Gupta to download emails. Gupta did not return follow-up messages. Spokesmen for Delhi police and India's foreign ministry did not respond to requests for comment.

HOROSCOPES AND PORNOGRAPHY

Operating from a small room above a shuttered tea stall in a west-Delhi retail complex, BellTroX bombarded its targets with tens of thousands of malicious emails, according to the data reviewed by Reuters. Some messages would imitate colleagues or relatives; others posed as Facebook login requests or graphic notifications to unsubscribe from pornography websites.

Fahmi Quadir's New York-based short selling firm Safkhet Capital was among 17 investment companies targeted by BellTroX between 2017 and 2019. She said she noticed a surge in suspicious emails in early 2018, shortly after she launched her fund.

Initially "it didn't seem necessarily malicious," Quadir said. "It was just horoscopes; then it escalated to pornography."

Eventually the hackers upped their game, sending her credible-sounding messages that looked like they came from her coworkers, other short sellers or members of her family. "They were even trying to emulate my sister," Quadir said, adding that she believes the attacks were unsuccessful.

U.S. advocacy groups were also repeatedly targeted. Among them were digital rights organizations Free Press and Fight for the Future, both of whom have lobbied for net neutrality. The groups said a small number of employee accounts were compromised, but the wider organizations' networks were untouched. The spying on those groups was detailed in a report by the Electronic Frontier Foundation in 2017, but has not been publicly tied to BellTroX until now.

Timothy Karr, a director at Free Press, said his organization "sees an uptick in breach attempts whenever we're engaged in heated and high-profile public policy debates." Evan Greer, deputy director of Fight for the Future, said: "When corporations and politicians can hire digital mercenaries to target civil society advocates, it undermines our democratic process."

While Reuters was not able to establish who hired BellTroX to carry out the hacking, two former employees said the company and others like it were usually contracted by private investigators on behalf of business rivals or political opponents.

Bart Santos of San Diego-based Bulldog Investigations was one of a dozen private detectives in the United States and Europe who told Reuters they had received unsolicited advertisements for hacking services out of India - including one from a person who described himself as a former BellTroX employee. The pitch offered to carry out "data penetration" and "email penetration."

Santos said he ignored those overtures, but could understand why some people didn't. "The Indian guys have a reputation for customer service," he said.

New Delhi, Jun 11: India on Thursday rejected a US government report that voiced concerns over alleged attacks and discrimination against religious and ethnic minorities in the country.

"Our principled position remains that we see no locus standi for a foreign entity to pronounce on the state of our citizens' constitutionally protected rights," Spokesperson in the Ministry of External Affairs Anurag Srivastava said.

He was replying to a question on the report at an online media briefing.

Mandated by the US Congress, the '2019 International Religious Freedom Report' that documents major instances of violation of religious freedom across the world was released by Secretary of State Mike Pompeo on Wednesday.

"India's vibrant democratic traditions and practices are evident to the world. The people and government of India are proud of our country's democratic traditions," the spokesperson said.

"We have a robust public discourse in India and constitutionally mandated institutions that guarantee protection of religious freedom and rule of law," he added.

The India section of the report said that US government officials underscored the importance of respecting religious freedom and promoting tolerance and mutual respect throughout the year with the ruling and opposition parties, civil society and religious freedom activists, and religious leaders belonging to various faith communities.

The report referred to the revocation of the special status of Jammu and Kashmir last August and the passage of the Citizenship Amendment Act (CAA) in Parliament in December as major highlights for India last year.

New Delhi, Jun 13: Petrol price on Saturday was hiked by 59 paise per litre and diesel by 58 paise as oil companies for the seventh day in a row adjusted retail rates in line with costs since ending an 82-day hiatus in rate revision.

Petrol price in Delhi was hiked to Rs 75.16 per litre from Rs 74.57, while diesel rates were increased to Rs 73.39 a litre from Rs 72.81, according to a price notification of state oil marketing companies.

Rates have been increased across the country and vary from state to state depending on the incidence of local sales tax or VAT.

This is the seventh daily increase in rates in a row since oil companies on Sunday restarted revising prices in line with costs, after ending an 82-day hiatus.

In seven hikes, petrol price has gone up by Rs 3.9 per litre and diesel by Rs 4.

The freeze in rates was imposed in mid-March soon after the government hiked excise duty on petrol and diesel to shore up additional finances.

Oil PSUs Indian Oil Corp (IOC), Bharat Petroleum Corp Ltd (BPCL) and Hindustan Petroleum Corp Ltd (HPCL), instead of passing on the excise duty hikes to customers, adjusted them against the fall in the retail rates that was warranted because of a decline in international oil prices.