WhatsApp Pay may put Indian digital banking at risk: Experts

Agencies
November 8, 2019

After WhatsApp accounts of 121 Indians were compromised by the Israeli spyware Pegasus, experts have warned that the payment feature the Facebook-owned platform is planning to launch in India may put the digital banking system at risk.

"WhatsApp payment needs to be seen with microscopic eye, primarily because in payment you will be dealing with sensitive personal data and cyber security is going to be an essential building block component for WhatsApp to demonstrate its due diligence," Pavan Duggal, one of the nation's top cyber law experts, told IANS.

The Ministry of Electronics and Information Technology (Meity) has already expressed dissatisfaction over the manner WhatsApp communicated about the compromised accounts.

The piece of NSO Group software called Pegasus allegedly exploited WhatsApp's video calling system by installing the spyware via missed calls to snoop on 1,400 users globally. The devices were compromised with just a WhatsApp video call.

In May, WhatsApp, which has 400 million users in India, urged its 1.5 billion global users to upgrade the app after discovering the vulnerability.

"WhatsApp's recent operations have shown that it's difficult for the government to get information from it. WhatsApp is an intermediary under the Information Technology Act and is mandated to exercise due diligence under the law. But it has failed to do due diligence," Duggal said.

"You should not be in a hurry to grant new licences or permission to WhatsApp without being satisfied with its adherence to cyber-security norms, international best practices and Indian laws," he said.

The Facebook-owned company is learnt to have countered the government charge that it didn't inform it about a privacy breach on the messaging platform. WhatsApp didn't even comply with the data breach notification law in India, Duggal said.

"It (WhatsApp) didn't follow reasonable security practices as mandated in Section 43A of the IT Act, 2000. In fact, it abetted the crime of un-authorised access too. Granting WhatsApp pay licence should be given a second thought by the Reserve Bank of India," said Prashant Mali, cyber lawyer at Bombay High Court.

In light of the recent hack, the government, the RBI and the National Payments Corporation of India (NPCI) is reportedly evaluating the risk of allowing social media apps into the digital payment ecosystem.

"With the government, the RBI and the NPCI planning to evaluate the risks involved in making payments via social media apps and services, the security of the UPI payment infrastructure on WhatsApp Pay has been rendered under a cloud of vulnerability," said Salman Waris, Managing Partner at TechLegis Advocates & Solicitors, a law firm.

The RBI revealed in an affidavit in the Supreme Court earlier that WhatsApp had not complied with the data localisation norms. In an April 2018 circular, the RBI stated that the data of any payment banking system have to physically located in India.

"The history of WhatsApp has shown that it's not cooperative with the government in sharing of information. If financial information is compromised, it will not only have an impact on users, but it can also have an impact on the sovereignty and security of India," Duggal said.

The government must go slow till the time WhatsApp demonstrates compliance to Indian law and showed that the platform was secure, he said.

"Because almost every phone user in India is on WhatsApp, it's all the more important for the government and the RBI to ensure that WhatsApp not only complies with the parametres of cyber security and data localisation norms, but also the IT Act and the rules and regulations thereunder.

"If WhatsApp doesn't comply with the data localisation norms, rules and regulations of the IT Act, then there is no question of granting new permission," Duggal said.

In a statement, a WhatsApp spokesperson said that safety and security of users remains the platform's highest priority.

"In May, our security team caught and stopped a cyber attack designed to send malware to mobile devices. Unable to break end-to-end encryption, this kind of malware abuses vulnerabilities within the underlying operating systems that power our mobile phones," the WhatsApp spokesperson said.

"Technology companies are constantly working to stay ahead of these kind of challenges through updates and patches. The safety and security of our users remains our highest priority, which is why in May we blocked the attack and have taken action in the courts to hold NSO accountable," the statement added.

Facebook filed a lawsuit against Israel's NSO Group last month. According to Facebook, the NSO Group violated laws, including the US Computer Fraud and Abuse Act.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
February 21,2020

Pune/Mumbai, Feb 21: A BJP youth wing leader from Pune on Thursday submitted a complaint application to the police against AIMIM leader Waris Pathan for his controversial remarks made recently in Karnataka.

Pathan has claimed he has been quoted out of context.

Parismal Deshpande, a BJYM worker, submitted the written application at the Deccan Gymkhana police station, demading action against Pathan for allegedly promoting enmity between different groups and outraging religious feelings of a community.

Deshpande, in his complaint stated, that Pathan reportedly said "15 crore hai lekin 100 crore pe bhari hai' (We are 15 crore but we can dominate 100 crore).

"The statement by Pathan promotes violence and create a divide between two communities.

"Because of such statements, there are possibilities of atmosphere getting vitiated. Hence, he should be booked under IPC sections 153A (promoting enmity between different groups, 295A (outraging religious feelings), and 504 (provoking breach of the peace)," Deshpande said in the complaint.

An officer from the Deccan police station confirmed receiving the application.

Meanwhile, in Mumbai, the BJP slammed Pathan.

The saffron party on Thursday tweeted @BJP4Maharashtra saying, "Waris Pathan, who are you threatening to? Shiv Sena led government may tolerate your comments; but BJP and people of Maharashtra will teach you a lesson that your hate- mongering speeches will be shut."

However, Pathan has issued a statement to the media, saying he has been quoted out of context.

"I hereby wish to state that the media reports on TV channels showing my statement made in the public meeting at Gulbarga five days back have totally quoted me out of context," Pathan claimed on late Thursday evening.

"I wish to reiterate that I can never say anything intentionally or unintentionally that hurts the sentiments of any caste, community or gender. I am a proud Indian and respects the plurality of this country," he said.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
May 15,2020

New Delhi, May 15: Microsoft founder Bill Gates on Friday thanked Prime Minister Narendra Modi for the interaction and stressed that combating the coronavirus pandemic requires global collaboration.

"Thank you for the conversation and partnership PM Narendra Modi. Combating the pandemic requires global collaboration. India's role is key as the world works to minimize social and economic impact, and pave the way to vaccine, testing, and treatment access for all," Bill Gates said.

Prime Minister Narendra Modi on Thursday interacted with philanthropist and Microsoft co-founder Bill Gates and discussed the global response to Covid-19 and the importance of global coordination on scientific innovation to combat the pandemic.

The Prime Minister underlined the conscious approach that India has adopted in its fight against the health crisis - an approach based on ensuring public engagement through appropriate messaging, a PMO release said.

He explained how this people-centric bottom-up approach has helped win acceptability for physical distancing, respect for frontline workers, wearing of masks, maintaining proper hygiene, and respecting lockdown provisions.

They agreed that given India's willingness and capacity to contribute to global efforts, particularly for benefit of fellow developing countries, it was important for India to be included in the ongoing global discussions for coordinating responses to the pandemic.

The Prime Minister also suggested that the Gates Foundation could take the lead in analyzing the necessary changes in lifestyles, economic organisation, social behaviour, modes of disseminating education and healthcare, that would emerge in the post-Covid world, and the associated technological challenges that would need to be addressed.

He said that India would be happy to contribute to such an analytical exercise based on its own experiences.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
March 12,2020

Geneva, Mar 12: For the global economy, virus repercussions were profound, with increasing concerns of wealth- and job-wrecking recessions. U.S. stocks wiped out more than all the gains from a huge rally a day earlier as Wall Street continued to reel.

The Dow Jones Industrial Average dropped 1,464 points, bringing it 20% below its record set last month and putting it in what Wall Street calls a “bear market.” The broader S&P 500 is just 1 percentage point away from falling into bear territory and bringing to an end one of the greatest runs in Wall Street’s history.

WHO officials said they thought long and hard about labeling the crisis a pandemic — defined as sustained outbreaks in multiple regions of the world.

The risk of employing the term, Ryan said, is “if people use it as an excuse to give up.” But the benefit is “potentially of galvanizing the world to fight.”

Underscoring the mounting challenge: soaring numbers in the U.S. and Europe’s status as the new epicenter of the pandemic. While Italy exceeds 12,000 cases and the United States has topped 1,300, China reported a record low of just 15 new cases Thursday and three-fourths of its infected patients have recovered.

China’s totals of 80,793 cases and 3,169 deaths are a shrinking portion of the world’s more than 126,000 infections and 4,600 deaths.

“If you want to be blunt, Europe is the new China,” said Robert Redfield, the head of the U.S. Centers for Disease Control and Prevention.

With 12,462 cases and 827 deaths, Italy said all shops and businesses except pharmacies and grocery stores would be closed beginning Thursday and designated billions in financial relief to cushion economic shocks in its latest efforts to adjust to the fast-evolving crisis that silenced the usually bustling heart of the Catholic faith, St. Peter’s Square.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.