Fuel prices witness fresh hike

New Delhi, Jun 3: Over 1 lakh scanned copies of Indians' national IDs, including Aadhaar, PAN card and passport, have been put on dark web for sale, cyber intelligence firm Cyble said on Wednesday.

The leaked data seems to have originated from a third party and not from the government system, according to a report by Cyble.

"We came across a non-reputed actor who is currently selling over 1 lakh Indian National IDs on the dark net. With such a low reputation, ideally, we would have skipped this; however, the samples shared by the actor intrigued our interest -- and also the volume. The actor is alleged to have access to over 1 lakh IDs from different places in India," Cyble said.

The personal data leaked by cyber criminals leads to various nefarious activities such as identity thefts, scams, and corporate espionage. Many criminals use the personal details in the IDs to win trust of the people over a phone call for fraudulent activities.

Cyber criminals leak personal data of 2.9 cr job-seeking Indians on dark web for free

The Cyble researchers acquired around 1,000 IDs from the seller and confirmed that the scanned IDs belong to Indians.

"Preliminary analysis suggests that the data originated from a third party, and no indication or artefact is indicating that it came from a government system. At this point, Cyble researchers are still investigating this further -- we are hoping to share an update soon," Cyble said.

The scanned ID documents indicate that the data may have been leaked from a company's data base in the segment where they have to comply with 'Know Your Customer' (KYC) norms.

"Cyble researchers have also learned about a surge in KYC and banking scams -- leaks such as this are often used by scammers to target individuals, especially elderlies," Cyble said.

The cyber intelligence firm has recommended people to refrain from sharing personal information especially financial information over phone, e-mail or SMS.

"Regularly monitor your financial transaction, if you notice any suspicious transaction, contact your bank immediately," the company said.

In May, Cyble showed two instances where personal data of 7.65 crore Indians have been put on sale in the dark web. In one instance, the seller claimed to have sourced data of 4.75 crore Indians from online directory Truecaller and in other, the seller claimed to have sourced from job websites.

Truecaller, however, had denied the claim of breach in its database.

Expressing concern over the ban imposed on TikTok by the government of India, Facebook CEO Mark Zuckerberg has reportedly called the development in the south Asian country “worrisome”.

TikTok was amongst the 59 Chinese apps that were banned in India but why it hogs the maximum limelight because TikTok had the second-largest user base in India with over 200 million users.

As per The Verge writer Casey Newton, Zuckerberg was worried about TikTok’s India ban. Although it soon cashed into the opportunity and released a TikTok clone “Reels”, the government’s reason behind banning the app in India wasn’t received well by Mark Zuckerberg. 

He had said that if India can ban a platform with over 200 million users in India without citing concrete reasons, it can also ban Facebook if something goes amiss on the security and privacy front.

Why Mark finds it particularly worrisome because Facebook is already involved in a lot tussle with the governments across the world involving national security concerns. 

“Facebook already faces fights around the world from governments on both the left and the right related to issues that fit under the broad umbrella of national security: election interference, influence campaigns, hate speech, and even just plain-old democratic speech. Zuckerberg knows that the leap from banning TikTok on national security grounds to banning Facebook on national security grounds is more of a short hop,” the report by Casey read.

Facebook till now has not faced any kind of issue in India but considering the debacle with the other governments, it is not entirely wrong to worry about its future in India if any national security issue arises. Back in 2016, Facebook’s Free Basics service, which means a free but restricted internet service, was banned in India by the telecom regulators. 

The TRAI had said that the Free Basic services were banned in India because it violated the principles of net neutrality. With Free Basics services, Facebook had planned to bring more unconnected users online. But since 2016, there has been no major tussle between the Indian government and Zuckerberg due to national security issues.