WhatsApp Pay may put Indian digital banking at risk: Experts

Agencies
November 8, 2019

After WhatsApp accounts of 121 Indians were compromised by the Israeli spyware Pegasus, experts have warned that the payment feature the Facebook-owned platform is planning to launch in India may put the digital banking system at risk.

"WhatsApp payment needs to be seen with microscopic eye, primarily because in payment you will be dealing with sensitive personal data and cyber security is going to be an essential building block component for WhatsApp to demonstrate its due diligence," Pavan Duggal, one of the nation's top cyber law experts, told IANS.

The Ministry of Electronics and Information Technology (Meity) has already expressed dissatisfaction over the manner WhatsApp communicated about the compromised accounts.

The piece of NSO Group software called Pegasus allegedly exploited WhatsApp's video calling system by installing the spyware via missed calls to snoop on 1,400 users globally. The devices were compromised with just a WhatsApp video call.

In May, WhatsApp, which has 400 million users in India, urged its 1.5 billion global users to upgrade the app after discovering the vulnerability.

"WhatsApp's recent operations have shown that it's difficult for the government to get information from it. WhatsApp is an intermediary under the Information Technology Act and is mandated to exercise due diligence under the law. But it has failed to do due diligence," Duggal said.

"You should not be in a hurry to grant new licences or permission to WhatsApp without being satisfied with its adherence to cyber-security norms, international best practices and Indian laws," he said.

The Facebook-owned company is learnt to have countered the government charge that it didn't inform it about a privacy breach on the messaging platform. WhatsApp didn't even comply with the data breach notification law in India, Duggal said.

"It (WhatsApp) didn't follow reasonable security practices as mandated in Section 43A of the IT Act, 2000. In fact, it abetted the crime of un-authorised access too. Granting WhatsApp pay licence should be given a second thought by the Reserve Bank of India," said Prashant Mali, cyber lawyer at Bombay High Court.

In light of the recent hack, the government, the RBI and the National Payments Corporation of India (NPCI) is reportedly evaluating the risk of allowing social media apps into the digital payment ecosystem.

"With the government, the RBI and the NPCI planning to evaluate the risks involved in making payments via social media apps and services, the security of the UPI payment infrastructure on WhatsApp Pay has been rendered under a cloud of vulnerability," said Salman Waris, Managing Partner at TechLegis Advocates & Solicitors, a law firm.

The RBI revealed in an affidavit in the Supreme Court earlier that WhatsApp had not complied with the data localisation norms. In an April 2018 circular, the RBI stated that the data of any payment banking system have to physically located in India.

"The history of WhatsApp has shown that it's not cooperative with the government in sharing of information. If financial information is compromised, it will not only have an impact on users, but it can also have an impact on the sovereignty and security of India," Duggal said.

The government must go slow till the time WhatsApp demonstrates compliance to Indian law and showed that the platform was secure, he said.

"Because almost every phone user in India is on WhatsApp, it's all the more important for the government and the RBI to ensure that WhatsApp not only complies with the parametres of cyber security and data localisation norms, but also the IT Act and the rules and regulations thereunder.

"If WhatsApp doesn't comply with the data localisation norms, rules and regulations of the IT Act, then there is no question of granting new permission," Duggal said.

In a statement, a WhatsApp spokesperson said that safety and security of users remains the platform's highest priority.

"In May, our security team caught and stopped a cyber attack designed to send malware to mobile devices. Unable to break end-to-end encryption, this kind of malware abuses vulnerabilities within the underlying operating systems that power our mobile phones," the WhatsApp spokesperson said.

"Technology companies are constantly working to stay ahead of these kind of challenges through updates and patches. The safety and security of our users remains our highest priority, which is why in May we blocked the attack and have taken action in the courts to hold NSO accountable," the statement added.

Facebook filed a lawsuit against Israel's NSO Group last month. According to Facebook, the NSO Group violated laws, including the US Computer Fraud and Abuse Act.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
May 6,2020

Hyderabad, May 6: Away from city lights, two hours before Sunrise, people in India and across the world can witness Annual Meteor Shower called Eta Aquarids till May 28.

Observed since time immemorial, Meteor shower are commonly known as shooting stars which are nothing but dust flakes of comet/asteroid entering earth atmosphere.

This Annual Eta Aquarids Meteor Shower peaked on Wednesday at 02.30 am on Wednesday whereas presence of Full Moon was an obstacle outshining bright streaks of lights of this meteor shower zipping across the South Eastern sky.

As this meteor shower is active till May 28, people can still watch this celestial spectacle in early morning every day, Planetary Society of India (PSI) Director N Sri Raghunandan Kumar interacting with UNI said.

As per International Meteor Organization (IMO), 50 meteors per hour are expected to be seen on day of peak today. And this number would vary as days pass on till May 28 while earth passes through dust cloud of comet debris in its orbit.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
January 7,2020

Jan 7: A Delhi Court today issued death warrant against four convicts in the 2012 Nirbhaya gang-rape and murder case. The hanging will take place on January 22 at 7 am.

During the hearing, the prosecution said there was no application pending before any court or the President right now by any of the convicts and the review petition of all the convicts was dismissed by the Supreme Court.

On Monday, the court had reserved order on issuing of death warrants against four death row convicts.

Today's order comes days after mother of the victim in the 2012 Delhi gang-rape and murder case moved the Supreme Court on opposing the plea filed by one of the four death-row convicts seeking review of its 2017 judgement awarding him death penalty.

The apex court had on July 9 last year dismissed the review pleas filed by the other three convicts — Mukesh (30), Pawan Gupta (23) and Vinay Sharma (24) — in the case, saying no grounds have been made out by them for review of the 2017 verdict.

The 23-year-old girl was gangraped and murdered by six men on a moving bus on 16 December 2012. The main accused, Ram Singh, allegedly committed suicide in Tihar Jail during the trial. Another accused was a minor at the time of the commission of the crime and was sent to a reform facility and released after three years.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
June 26,2020

Washington, Jun 26: The US is reviewing its global deployment of forces to ensure it is postured appropriately to counter the People's Liberation Army, given the increasing threat posed by China to Asian countries like India, Malaysia, Indonesia, and the Philippines, Secretary of State Mike Pompeo said on Thursday.

Mr Pompeo made those remarks in response to a question during the virtual Brussels Forum 2020 of the German Marshall Fund.

"We're going to make sure we're postured appropriately to counter the PLA. We think that the challenge of our times, and we're going to make sure we have resources in place to do that," Mr Pompeo said.
 
The force posture review is being done at the direction of President Donald Trump, as part of which the US is reducing the number of its troops in Germany from about 52,000 to 25,000, he said.

Mike Pompeo said that the force posture would be dictated by the ground realities.

"In certain places there will be fewer American resources. There'll be other places - I just talked about the threat from the Chinese Communist Party, so now threats to India, threats to Vietnam, threats to Malaysia, Indonesia, South China Sea challenges, the Philippines," he said.

"To the extent that that changed, the difference in what the US decided to do impacts adversely a threat some place, it may be that other nations need to step up and take responsibility for their own defense in ways that they hadn't done previously. So, we want to do this in full consultation with all of our partners all around the world, and certainly our friends in Europe," Mr Pompeo said.

President Trump is being criticised for reducing troops from Germany. His critics say that this will increase the threat from Russia to Europe.

Mike Pompeo, however, did not agree with that argument.

It has been a long time since there has been a strategic review of our force posture all across the world. The US undertook that starting about 2.5 years ago, whether that was our forces in Africa, our forces in Asia, the force we have in the Middle East and in Europe, he said.

"We began to say these are often decisions that were made in a different time. Should we reallocate those a different way? Should we have a different composition of those forces? Everyone always wants to talk about ground troops. I get it. I was a young tank officer. You described that. There's nothing I like as much as a good M1 tank.

"But it's often the case that the capacity to deter Russia or other adversaries isn''t determined any longer by just having a bunch of folks garrisoned someplace. So, we really went to back fundamentally relook, what is the nature of the conflict, what''s the nature of the threat, and how should we allocate our resources, whether that''s our resources in the intelligence community, our resources from the Air Force or the Marines and Army," Mr Pompeo said.

Last week, Mike Pompeo criticised the Chinese Army for "escalating" the border tension with India and militarising the strategic South China Sea. He also described the ruling Communist Party of China (CPC) as a "rogue actor".

"Our broad set of allocation of security apparatus, our ability to counter cyber threats, how do we allocate them? What''s the best way to do this? And the decision that you see the president made with respect to Germany is an outcome from a collective set of decisions about how we''re going to posture our resources around the world," said the top American diplomat on Thursday.

Changes in force posture is being taken in consultations with allies and friends, Mr Pompeo said.

"President Trump has spoken to this. (Defense) Secretary (Mark) Esper will be in London today and in Brussels tomorrow. We''ll talk about our plan and how we''re thinking about delivering it," he said.

"But you should understand this, and I hope our European partners will understand this as well. When you see what we ultimately conclude, how we ultimately deliver on the statements of the president made, that they''re aimed squarely at what we believe to be democracies'' fundamental interest and certainly America's most fundamental interest," Mr Pompeo said.

Earlier this month, Mike Pompeo had said that China's actions, be it on the India border, or in Hong Kong or in the South China Sea, were part of the behaviour of the ruling Communist Party in Beijing in the recent past.

China has been fast expanding military and economic influence in the Indo-Pacific region, triggering concern in various countries of the region and beyond.

China is engaged in hotly contested territorial disputes in both the South China Sea and the East China Sea. Beijing has built up and militarised many of the islands and reefs it controls in the region. Both areas are stated to be rich in minerals, oil and other natural resources and are vital to global trade.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.