PM Modi arrives in Palestine on a historic visit

Jun 27: Alittle-known Indian IT firm offered its hacking services to help clients spy on more than 10,000 email accounts over a period of seven years.

New Delhi-based BellTroX InfoTech Services targeted government officials in Europe, gambling tycoons in the Bahamas, and well-known investors in the United States including private equity giant KKR and short seller Muddy Waters, according to three former employees, outside researchers, and a trail of online evidence.

Aspects of BellTroX's hacking spree aimed at American targets are currently under investigation by U.S. law enforcement, five people familiar with the matter told Reuters. The U.S. Department of Justice declined to comment.

Reuters does not know the identity of BellTroX's clients. In a telephone interview, the company's owner, Sumit Gupta, declined to disclose who had hired him and denied any wrongdoing.

Muddy Waters founder Carson Block said he was "disappointed, but not surprised, to learn that we were likely targeted for hacking by a client of BellTroX." KKR declined to comment.

Researchers at internet watchdog group Citizen Lab, who spent more than two years mapping out the infrastructure used by the hackers, released a report that BellTroX employees were behind the espionage campaign.

"This is one of the largest spy-for-hire operations ever exposed," said Citizen Lab researcher John Scott-Railton.

Although they receive a fraction of the attention devoted to state-sponsored espionage groups or headline-grabbing heists, "cyber mercenary" services are widely used, he said. "Our investigation found that no sector is immune."

A cache of data reviewed by Reuters provides insight into the operation, detailing tens of thousands of malicious messages designed to trick victims into giving up their passwords that were sent by BellTroX between 2013 and 2020. The data was supplied on condition of anonymity by online service providers used by the hackers after Reuters alerted the firms to unusual patterns of activity on their platforms.

The data is effectively a digital hit list showing who was targeted and when. Reuters validated the data by checking it against emails received by the targets.

On the list: judges in South Africa, politicians in Mexico, lawyers in France and environmental groups in the United States. These dozens of people, among the thousands targeted by BellTroX, did not respond to messages or declined comment.

Reuters was not able to establish how many of the hacking attempts were successful.

BellTroX's Gupta was charged in a 2015 hacking case in which two U.S. private investigators admitted to paying him to hack the accounts of marketing executives. Gupta was declared a fugitive in 2017, although the U.S. Justice Department declined to comment on the current status of the case or whether an extradition request had been issued.

Speaking by phone from his home in New Delhi, Gupta denied hacking and said he had never been contacted by law enforcement. He said he had only ever helped private investigators download messages from email inboxes after they provided him with login details.

"I didn't help them access anything, I just helped them with downloading the mails and they provided me all the details," he told Reuters. "I am not aware how they got these details but I was just helping them with the technical support."

Reuters could not determine why the private investigators might need Gupta to download emails. Gupta did not return follow-up messages. Spokesmen for Delhi police and India's foreign ministry did not respond to requests for comment.

HOROSCOPES AND PORNOGRAPHY

Operating from a small room above a shuttered tea stall in a west-Delhi retail complex, BellTroX bombarded its targets with tens of thousands of malicious emails, according to the data reviewed by Reuters. Some messages would imitate colleagues or relatives; others posed as Facebook login requests or graphic notifications to unsubscribe from pornography websites.

Fahmi Quadir's New York-based short selling firm Safkhet Capital was among 17 investment companies targeted by BellTroX between 2017 and 2019. She said she noticed a surge in suspicious emails in early 2018, shortly after she launched her fund.

Initially "it didn't seem necessarily malicious," Quadir said. "It was just horoscopes; then it escalated to pornography."

Eventually the hackers upped their game, sending her credible-sounding messages that looked like they came from her coworkers, other short sellers or members of her family. "They were even trying to emulate my sister," Quadir said, adding that she believes the attacks were unsuccessful.

U.S. advocacy groups were also repeatedly targeted. Among them were digital rights organizations Free Press and Fight for the Future, both of whom have lobbied for net neutrality. The groups said a small number of employee accounts were compromised, but the wider organizations' networks were untouched. The spying on those groups was detailed in a report by the Electronic Frontier Foundation in 2017, but has not been publicly tied to BellTroX until now.

Timothy Karr, a director at Free Press, said his organization "sees an uptick in breach attempts whenever we're engaged in heated and high-profile public policy debates." Evan Greer, deputy director of Fight for the Future, said: "When corporations and politicians can hire digital mercenaries to target civil society advocates, it undermines our democratic process."

While Reuters was not able to establish who hired BellTroX to carry out the hacking, two former employees said the company and others like it were usually contracted by private investigators on behalf of business rivals or political opponents.

Bart Santos of San Diego-based Bulldog Investigations was one of a dozen private detectives in the United States and Europe who told Reuters they had received unsolicited advertisements for hacking services out of India - including one from a person who described himself as a former BellTroX employee. The pitch offered to carry out "data penetration" and "email penetration."

Santos said he ignored those overtures, but could understand why some people didn't. "The Indian guys have a reputation for customer service," he said.

Beijing, Jan 23: China is putting on lockdown a city of 11 million people considered the epicenter of the new coronavirus outbreak that has killed 17 and infected nearly 600 people, as health authorities around the world work to prevent a global pandemic.

The previously unknown coronavirus strain is believed to have emerged late last year from illegally traded wildlife at an animal market in the central Chinese city of Wuhan. Cases have been detected as far away as the United States, stoking fears the virus is already spreading worldwide.

Wuhan's local government said it would shut down all urban transport networks and suspend outgoing flights from the city as of 10 a.m. (0200 GMT) Thursday, state media reported, adding that the government is urging citizens to not leave the city in the absence of special circumstances.

Contrasting with its secrecy over the 2002-03 Severe Acute Respiratory Syndrome (SARS), which killed nearly 800 people, China's communist government has this time given regular updates to try to avoid panic as millions of people travel for the Chinese Lunar New Year holiday.

Chinese authorities have confirmed 571 cases and 17 deaths as of end-Wednesday, state television reported on Thursday. There are eight other known cases around the world - Thailand has confirmed four cases, while the United States, Taiwan, South Korea and Japan have each reported one.

Vice Premier Sun Chunlan said during a visit to Wuhan that authorities needed to be open about the spread of the virus and their efforts to contain it, the official Xinhua news agency reported on Thursday, comments likely to reassure global health experts.

After a meeting at its Geneva headquarters on Wednesday, the World Health Organization (WHO) said it would decide on Thursday whether to declare the outbreak a global health emergency, which would step up the international response.

If it does so, it will be the sixth international public health emergency to be declared in the last decade.

WHO Director-General Tedros Adhanom Ghebreyesus told reporters in Geneva that China's actions so far were "very strong" but called in Beijing to take "more and significant measures to limit or minimise the international spread".

"We stressed to them that by having a strong action not only they will control the outbreak in their country but they will also minimise the chances of this outbreak spreading internationally. So they recognise that," he said.

A senior U.S. State Department official also called on China to "play a bigger role in global health so they taking more and significant measures to limit or minimise the international spread".

"The lack of transparency in the past, especially with SARS ... gives us concern that that may be the case here," the official said, adding however that there were "positive signs that they have taken action in Wuhan".

Fears of a pandemic initially spooked markets but they regained their footing on Wednesday, with investors citing the robust response from authorities as reassuring.

VIRUS SPREADING

The outbreak began in Wuhan, a major transportation hub as well as central China's main industrial and commercial centre, and has now spread to other major population centers including Beijing, Shanghai and Hong Kong.

There is no known cure for the virus. Symptoms include fever, difficulty in breathing and cough, similar to many other respiratory illnesses, and can cause pneumonia.

Chinese authorities are still investigating the origins of the virus, though they confirmed the outbreak began at a market in Wuhan with illegal wildlife transactions and that it can spread from one person to another via respiratory transmission. Among confirmed patients are 15 medical workers, further adding to worries about a possible global pandemic.

Many Chinese were canceling trips, buying face masks, avoiding public places such as cinemas and shopping centers, and even turning to an online plague simulation game as a way to cope.

Airports globally stepped up screening passengers from China and the European Centre for Disease Control and Prevention (ECDC) said in a risk assessment that further global spread of the virus was likely.

Britain joined other countries including Australia in advising citizens against all but essential travel to Wuhan.

New Delhi, Mar 10: A military transport aircraft of the Indian Air Force (IAF) brought back 58 Indians from coronavirus-hit Iran on Tuesday, official said.

The aircraft, a C-17 Globemaster, was sent to Tehran on Monday evening.

About 2,000 Indians are living in Iran, a country that has witnessed increasing numbers of coronavirus cases in the last few days.

"The IAF aircraft has landed. Mission completed. On to the next," External Affairs Minister S Jaishankar tweeted.

In an earlier tweet, he said, "First batch of 58 Indian pilgrims being brought back from Iran. IAF C-17 taken off from Tehran and expected to land soon in Hindon."

"Thanks to the efforts of our Embassy @India_in_Iran and Indian medical team there, operating under challenging conditions. Thank you @IAF_MCC. Appreciate cooperation of Iranian authorities. We are working on the return of other Indians stranded there (sic)," Jaishankar added.

The aircraft landed at Hindon airbase in Ghaziabad, from where the passengers were take to a medical facility.

According to latest reports, 237 people have died of novel coronavirus in Iran while the number of positive cases stands at around 7,000.

It is the second such evacuation by the C-17 Globemaster in the last two weeks.

On February 27, 76 Indians and 36 foreign nationals were brought back from the Chinese city of Wuhan by the aircraft of the Indian Air Force.

The C-17 Globemaster is the largest military aircraft in the IAF's inventory. The plane can carry large combat equipment, troops and humanitarian aid across long distances in all weather conditions.

Four days ago, a Mahan airline plane brought swab samples of 300 Indians from Iran to India.