Gymkhana manager held in Chembur body parts case

Jun 27: Alittle-known Indian IT firm offered its hacking services to help clients spy on more than 10,000 email accounts over a period of seven years.

New Delhi-based BellTroX InfoTech Services targeted government officials in Europe, gambling tycoons in the Bahamas, and well-known investors in the United States including private equity giant KKR and short seller Muddy Waters, according to three former employees, outside researchers, and a trail of online evidence.

Aspects of BellTroX's hacking spree aimed at American targets are currently under investigation by U.S. law enforcement, five people familiar with the matter told Reuters. The U.S. Department of Justice declined to comment.

Reuters does not know the identity of BellTroX's clients. In a telephone interview, the company's owner, Sumit Gupta, declined to disclose who had hired him and denied any wrongdoing.

Muddy Waters founder Carson Block said he was "disappointed, but not surprised, to learn that we were likely targeted for hacking by a client of BellTroX." KKR declined to comment.

Researchers at internet watchdog group Citizen Lab, who spent more than two years mapping out the infrastructure used by the hackers, released a report that BellTroX employees were behind the espionage campaign.

"This is one of the largest spy-for-hire operations ever exposed," said Citizen Lab researcher John Scott-Railton.

Although they receive a fraction of the attention devoted to state-sponsored espionage groups or headline-grabbing heists, "cyber mercenary" services are widely used, he said. "Our investigation found that no sector is immune."

A cache of data reviewed by Reuters provides insight into the operation, detailing tens of thousands of malicious messages designed to trick victims into giving up their passwords that were sent by BellTroX between 2013 and 2020. The data was supplied on condition of anonymity by online service providers used by the hackers after Reuters alerted the firms to unusual patterns of activity on their platforms.

The data is effectively a digital hit list showing who was targeted and when. Reuters validated the data by checking it against emails received by the targets.

On the list: judges in South Africa, politicians in Mexico, lawyers in France and environmental groups in the United States. These dozens of people, among the thousands targeted by BellTroX, did not respond to messages or declined comment.

Reuters was not able to establish how many of the hacking attempts were successful.

BellTroX's Gupta was charged in a 2015 hacking case in which two U.S. private investigators admitted to paying him to hack the accounts of marketing executives. Gupta was declared a fugitive in 2017, although the U.S. Justice Department declined to comment on the current status of the case or whether an extradition request had been issued.

Speaking by phone from his home in New Delhi, Gupta denied hacking and said he had never been contacted by law enforcement. He said he had only ever helped private investigators download messages from email inboxes after they provided him with login details.

"I didn't help them access anything, I just helped them with downloading the mails and they provided me all the details," he told Reuters. "I am not aware how they got these details but I was just helping them with the technical support."

Reuters could not determine why the private investigators might need Gupta to download emails. Gupta did not return follow-up messages. Spokesmen for Delhi police and India's foreign ministry did not respond to requests for comment.

HOROSCOPES AND PORNOGRAPHY

Operating from a small room above a shuttered tea stall in a west-Delhi retail complex, BellTroX bombarded its targets with tens of thousands of malicious emails, according to the data reviewed by Reuters. Some messages would imitate colleagues or relatives; others posed as Facebook login requests or graphic notifications to unsubscribe from pornography websites.

Fahmi Quadir's New York-based short selling firm Safkhet Capital was among 17 investment companies targeted by BellTroX between 2017 and 2019. She said she noticed a surge in suspicious emails in early 2018, shortly after she launched her fund.

Initially "it didn't seem necessarily malicious," Quadir said. "It was just horoscopes; then it escalated to pornography."

Eventually the hackers upped their game, sending her credible-sounding messages that looked like they came from her coworkers, other short sellers or members of her family. "They were even trying to emulate my sister," Quadir said, adding that she believes the attacks were unsuccessful.

U.S. advocacy groups were also repeatedly targeted. Among them were digital rights organizations Free Press and Fight for the Future, both of whom have lobbied for net neutrality. The groups said a small number of employee accounts were compromised, but the wider organizations' networks were untouched. The spying on those groups was detailed in a report by the Electronic Frontier Foundation in 2017, but has not been publicly tied to BellTroX until now.

Timothy Karr, a director at Free Press, said his organization "sees an uptick in breach attempts whenever we're engaged in heated and high-profile public policy debates." Evan Greer, deputy director of Fight for the Future, said: "When corporations and politicians can hire digital mercenaries to target civil society advocates, it undermines our democratic process."

While Reuters was not able to establish who hired BellTroX to carry out the hacking, two former employees said the company and others like it were usually contracted by private investigators on behalf of business rivals or political opponents.

Bart Santos of San Diego-based Bulldog Investigations was one of a dozen private detectives in the United States and Europe who told Reuters they had received unsolicited advertisements for hacking services out of India - including one from a person who described himself as a former BellTroX employee. The pitch offered to carry out "data penetration" and "email penetration."

Santos said he ignored those overtures, but could understand why some people didn't. "The Indian guys have a reputation for customer service," he said.

New Delhi, Jul 25: Congress leader Priyanka Gandhi Vadra on Saturday attacked the Yogi Adityanath government over its handling of the Covid-19 crisis, saying that at a time when there is an "explosive" rise in cases, the state dispensation's "no test is equal to no corona" policy can lead to a "more frightening situation".

In a letter to the Uttar Pradesh chief minister, the Congress general secretary said that the situation is getting serious and the battle against the pandemic cannot be fought just by publicity and managing news.

Priyanka Gandhi said she hopes the chief minister will take "big and effective" steps that will assure people that the government is committed to protect their lives and they will not be left to God for protection.

"By showing the fear of coronavirus, corruption is thriving. If this is not reined in, the battle against coronavirus will turn into a disaster," Priyanka Gandhi said.

Noting that 2,500 cases of coronavirus were reported in UP on Friday, she said almost all the metros were flooded with Covid-19 cases, but now even the villages were not unaffected by its spread.

"Quarantine centres in UP are in a pathetic state. In some places, the situation is so bad, that people are fearing mismanagement more than the coronavirus. Because of such a scenario, they are not stepping out of their homes for getting tested," Priyanka Gandhi said.

"This is a major failure of the government," she asserted.

The state government by believing in the "no test = no corona" mantra has adopted a low testing policy, she alleged in the letter written in Hindi.

"There is an explosive rise in Covid-19 cases. Till testing will not be increased in a transparent manner, the fight against the pandemic will be incomplete and the situation can become more frightening," she said.

"Your government claimed that there is provision for 1.5 lakh beds, but with only about 20,000 active infected cases, there is a scampering for beds," she said.

If there is a huge crowd in front of the hospitals, then why is the UP government not constructing temporary hospitals on the lines of those set up in Mumbai and Delhi, Priyanka Gandhi asked.

Availing medical facility is the fundamental right of every citizen, she asserted.

"The prime minister is a Member of Parliament from Varanasi, the defence minister is from Lucknow, many other Union ministers are from UP. Why can't temporary hospitals be opened in Varanasi, Lucknow, Agra etc." Priyanka Gandhi asked.

She suggested that temporary hospitals can be operated by the Defence Research and Development Organisation (DRDO), the Army and the paramilitary, or if need be, the DRDO hospital can be brought to Lucknow.

Also, central facilities set up in Delhi can also be used for border districts, Priyanka Gandhi said, adding that their utilisation is not being maximised there.

Noting that home isolation was a good step, she said it should not be implemented in haste.

Informed decisions should be taken on key matters related to home isolation like what will be the arrangement for monitoring patients, who needs to be informed if the patient's condition worsens and what will the medical facilities cost in home isolation, she said.

What will be the arrangement for checking the temperature and oxygen level of the patients in home isolation, she further asked in the letter.

The government should do a complete mapping of it and give complete information at the local level to the public, Priyanka Gandhi said.

The Congress general secretary said that she realises, that often the state government feels that the Congress' suggestions are given only from a political point of view.

"This was evident from the response of your government while we were trying to get buses for UP workers who were walking home," she said.

"I want to assure you once again that protecting the health and life of the people of Uttar Pradesh is our biggest sentiment at this time. We are continuously striving with constructive support and a spirit of service," she said in the letter.

At this time when the pandemic is growing rapidly, the Congress stands with the people of UP and is ready to give full support to the state government, she said.

Tightening its grip over Uttar Pradesh, Covid-19 claimed a record 50 lives in the state on Friday as the deadly virus infected 2,667 people more in the largest single-day spike till date.

New Delhi, Jan 4: The Supreme Court on Thursday extended till June 12 its earlier order of May 15 asking the government not to take any coercive action against companies and employers for violation of Centre's March 29 circular for payment of full wages to employees for the lockdown period.

A bench of Justices Ashok Bhushan, S K Kaul and M R Shah reserved the verdict on a batch of petitions filed by various companies challenging the circular of the Ministry of Home Affairs issued on March 29 asking the employers to pay full wages to the employees during the nationwide lockdown due to the coronavirus pandemic.

In the proceedings conducted through video conferencing, the top court said there was a concern that workmen should not be left without pay, but there may be a situation where the industry may not have money to pay and hence, the balancing has to be done.

Meanwhile, the apex court asked the parties to file their written submissions in support of their claims.

The top court on May 15 had asked the government not to take any coercive action against the companies and employers who are unable to pay full wages to their employees during the nationwide lockdown due to the coronavirus pandemic.

The Centre also filed an affidavit justifying its March 29 direction saying that the employers claiming incapacity in paying salaries must be directed to furnish their audited balance sheets and accounts in the court.

The government has said that the March 29 directive was a "temporary measure to mitigate the financial hardship" of employees and workers, specially contractual and casual, during the lockdown period and the directions have been revoked by the authority with effect from May 18.