WhatsApp Pay may put Indian digital banking at risk: Experts

Agencies
November 8, 2019

After WhatsApp accounts of 121 Indians were compromised by the Israeli spyware Pegasus, experts have warned that the payment feature the Facebook-owned platform is planning to launch in India may put the digital banking system at risk.

"WhatsApp payment needs to be seen with microscopic eye, primarily because in payment you will be dealing with sensitive personal data and cyber security is going to be an essential building block component for WhatsApp to demonstrate its due diligence," Pavan Duggal, one of the nation's top cyber law experts, told IANS.

The Ministry of Electronics and Information Technology (Meity) has already expressed dissatisfaction over the manner WhatsApp communicated about the compromised accounts.

The piece of NSO Group software called Pegasus allegedly exploited WhatsApp's video calling system by installing the spyware via missed calls to snoop on 1,400 users globally. The devices were compromised with just a WhatsApp video call.

In May, WhatsApp, which has 400 million users in India, urged its 1.5 billion global users to upgrade the app after discovering the vulnerability.

"WhatsApp's recent operations have shown that it's difficult for the government to get information from it. WhatsApp is an intermediary under the Information Technology Act and is mandated to exercise due diligence under the law. But it has failed to do due diligence," Duggal said.

"You should not be in a hurry to grant new licences or permission to WhatsApp without being satisfied with its adherence to cyber-security norms, international best practices and Indian laws," he said.

The Facebook-owned company is learnt to have countered the government charge that it didn't inform it about a privacy breach on the messaging platform. WhatsApp didn't even comply with the data breach notification law in India, Duggal said.

"It (WhatsApp) didn't follow reasonable security practices as mandated in Section 43A of the IT Act, 2000. In fact, it abetted the crime of un-authorised access too. Granting WhatsApp pay licence should be given a second thought by the Reserve Bank of India," said Prashant Mali, cyber lawyer at Bombay High Court.

In light of the recent hack, the government, the RBI and the National Payments Corporation of India (NPCI) is reportedly evaluating the risk of allowing social media apps into the digital payment ecosystem.

"With the government, the RBI and the NPCI planning to evaluate the risks involved in making payments via social media apps and services, the security of the UPI payment infrastructure on WhatsApp Pay has been rendered under a cloud of vulnerability," said Salman Waris, Managing Partner at TechLegis Advocates & Solicitors, a law firm.

The RBI revealed in an affidavit in the Supreme Court earlier that WhatsApp had not complied with the data localisation norms. In an April 2018 circular, the RBI stated that the data of any payment banking system have to physically located in India.

"The history of WhatsApp has shown that it's not cooperative with the government in sharing of information. If financial information is compromised, it will not only have an impact on users, but it can also have an impact on the sovereignty and security of India," Duggal said.

The government must go slow till the time WhatsApp demonstrates compliance to Indian law and showed that the platform was secure, he said.

"Because almost every phone user in India is on WhatsApp, it's all the more important for the government and the RBI to ensure that WhatsApp not only complies with the parametres of cyber security and data localisation norms, but also the IT Act and the rules and regulations thereunder.

"If WhatsApp doesn't comply with the data localisation norms, rules and regulations of the IT Act, then there is no question of granting new permission," Duggal said.

In a statement, a WhatsApp spokesperson said that safety and security of users remains the platform's highest priority.

"In May, our security team caught and stopped a cyber attack designed to send malware to mobile devices. Unable to break end-to-end encryption, this kind of malware abuses vulnerabilities within the underlying operating systems that power our mobile phones," the WhatsApp spokesperson said.

"Technology companies are constantly working to stay ahead of these kind of challenges through updates and patches. The safety and security of our users remains our highest priority, which is why in May we blocked the attack and have taken action in the courts to hold NSO accountable," the statement added.

Facebook filed a lawsuit against Israel's NSO Group last month. According to Facebook, the NSO Group violated laws, including the US Computer Fraud and Abuse Act.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
July 4,2020

Maryland, Jul 4: The total number of coronavirus cases worldwide has touched 11 million, according to the latest data by the Johns Hopkins University on Saturday.
More than 523,613 people have died globally due to the infection, according to the data compiled by the university.

Though the virus is believed to have emerged from the Chinese city of Wuhan, the United States is the worst-hit country from COVID-19, which was declared as a pandemic by the WHO on March 11.

At least 129,275 people have died in the US from the coronavirus, according to Johns Hopkins University's latest tally.
There are at least 2,786,178 cases of the disease in the country. The US has the highest number of cases in the world.

The second worst-hit country is Brazil, which has reported 1,496,858 lakh cases. The country's death toll stands at 61,884.

The countries around the world including the US, India, Denmark, and Italy have started the process of lifting the lockdown by easing restrictions despite the number of cases continues to rise.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
Agencies
July 2,2020

New Delhi, Jul 2: In the midst of India's tense border standoff with China, the defence ministry on Thursday approved procurement of a number of frontline fighter jets, missile systems and other platforms at a cost of Rs 38,900 crore to bolster the combat capability of the armed forces, officials said.

They said 21 MiG-29 fighter jets are being bought from Russia while 12 Su-30 MKI aircraft will be procured from Russia. The ministry has also approved a separate proposal to upgrade existing 59 MiG-29 aircraft.

The decisions were taken at a meeting of the Defence Acquisition Council (DAC) chaired by Defence Minister Rajnath Singh.

The procurement of 21 MiG-29 and upgrading of the existing fleet of MiG-29 are estimated to cost the government Rs 7,418 crore while purchase of 12 new Su-30 MKI from the Hindustan Aeronautics Ltd will be made at a cost of Rs 10,730 crore, the officials said.

The DAC also approved procurement of long-range land-attack cruise missile systems with a range of 1,000 KM and Astra Missiles for Navy and Air Force.

The officials said cost of these design and development proposals is in the range of Rs 20,400 crore.

"While acquisition of Pinaka missile systems will enable raising additional regiments over and above the ones already inducted, addition of long-range land attack missile systems having a firing range of 1000 KM to the existing arsenal will bolster the attack capabilities of the Navy and the Air Force," said a defence ministry official.

"Similarly induction of Astra Missiles having beyond visual range capability will serve as a force multiplier and immensely add to the strike capability of the Indian Navy and the Indian Air Force," he said.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
January 15,2020

Jan 15: Uttar Pradesh Chief Minister Yogi Adityanath said on Tuesday that the Muslim population in India increased manifold since the partition because they were given special rights and facilities, according to a report by The Indian Express.

"The Muslim population in India has increased manifold since 1947, it has gone up by seven to eight times. No one has any objection. If they, as citizens of the country, work for development, they are welcome. Their population has increased because they have been given special rights and facilities. All possible steps were taken to ensure their growth," Adityanath said while addressing a rally in Gaya organised by the BJP in support of the Citizenship (Amendment) Act.

He asked the audience, "But what happened in Pakistan?" Claiming that the Hindu population in Pakistan had decreased since 1947, he asked why it was so.

Yogi said that the countrywide anti-CAA protests are a "conspiracy" hatched from afar by those resentful of a united and grand India and these are being aided by a "crooked" opposition. He further charged that those opposing the legislation were committing the "paap" (sin) of working against national interests.

"For taking such a step, Prime Minister Narendra Modi and Home Minister Amit Shah deserve acclaim. Instead, they are being attacked", Yogi lamented.

Comments

India
 - 
Wednesday, 15 Jan 2020

He himself contradicts his statements. He claims the Muslim population rose 8-9 (according to him) times since 1947. If he was educated its simple 73 years have passed the population grows. Still, the Muslim population is only a minority against the majority. He talks about special rights and facilities given yes agreed but not by him it's by the Constitution of India and for all the minorities. So it's not you its Constitution of India.  The majority of the people are against the act CAA is against the very fundamental of the Constitution of India which PM & HM are taking away from the people. If you disagree, disrespect, go against it then you are against the country itself in Hindi deshdruhi. 

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.