PM hints at more action to unearth black money

Several India-based firms are spoofing the World Health Organisation (WHO) by creating fake Gmail accounts and luring business leaders in disguise of informing them of latest COVID-19 announcements and hack their personal and financial information, Google has warned.

These "hack-for-hire" firms, many based in India, have been creating Gmail accounts spoofing the WHO, largely targeting business leaders in financial services, consulting, and healthcare corporations within numerous countries including, the US, Slovenia, Canada, India, Bahrain, Cyprus, and the UK.

"The lures themselves encourage individuals to sign up for direct notifications from the WHO to stay informed of COVID-19 related announcements, and link to attacker-hosted websites that bear a strong resemblance to the official WHO website," security researchers from Google's Threat Analysis Group said on Wednesday.

The sites typically feature fake login pages that prompt potential victims to give up their Google account credentials, and occasionally encourage individuals to give up other personal information, such as their phone numbers.

On any given day, Google's Threat Analysis Group (TAG) said it is tracking more than 270 targeted or government-backed attacker groups from more than 50 countries.

Last month, it sent 1,755 warnings to users whose accounts were targets of government-backed attackers.

"Our team of analysts and security experts is focused on identifying and stopping issues like phishing campaigns, zero-day vulnerabilities and hacking against Google, our products and our users," said the tech giant.

Google continues to see attacks from groups like Charming Kitten on medical and healthcare professionals, including WHO employees.

"We're seeing a resurgence in COVID-related hacking and phishing attempts from numerous commercial and government-backed attackers," said the company.

Government-backed or state-sponsored groups have different goals in carrying out their attacks: Some are looking to collect intelligence or steal intellectual property; others are targeting dissidents or activists, or attempting to engage in coordinated influence operations and disinformation campaigns.

Google said that since March, it has removed more than 1,000 YouTube channels that were part of a large campaign and behaving in a coordinated manner.

"These channels were mostly uploading spammy, non-political content, but a small subset posted primarily Chinese-language political content similar to the findings of a recent Graphika report," said the company.

Several cybersecurity firms have seen a spike in COVID-19 related scams and hacking attempts. Hackers are also creating scam sites similar to COVID-19 relief packages.

Researchers at Check Point Software Technologies revealed in mid-May that they have seen 192,000 coronavirus-related cyber-attacks per week over the past three weeks, a 30 % increase compared to previous weeks.

Thiruvananthapuram, Apr 20: Kerala Chief Minister Pinarayi Vijayan on Sunday alleged that efforts were being made to undermine the achievements of the state government in its fight against Covid-19 and said he was "ignoring" them as it was not the time for controversies.

The Opposition Congress has been raising allegations that a US-based company had been entrusted with the task of collecting data regarding the virus-infected patients in the state, in violation of fundamental rights.

"Many developed nations are in awe of the achievements of Kerala in its fight against Covid-19 pandemic. This is the speciality of Kerala model," Vijayan said. Referring to the data collection charge levelled by the opposition parties, Vijayan said some were engaged in slandering the state government.

"Those who think that the government should not have a reputation for effectively handling the coronavirus outbreak are engaged in slandering the state government. It has happened before, it's happening now also. This is not the time to go behind controversies. People are watching and they will evaluate," Vijayan said in his weekly interactive programme 'Naam munnott'.

He said he had decided to ignore such controversies. The ward-level committees, set up by the government for the anti-coronavirus fight, was collecting information of those under home isolation, elderly persons and those at the risk of the disease using a questionnaire in this regard and upload it on the server of the private agency. The Congress has alleged that the data, collected through the government machinery, was being uploaded not on the government server but on that of the foreign company.