securitylinkindia

MassMediaLink India LLP SecurityLink India

Cyber-Enabled Financial Crime: USD130 Million Intercepted in Global INTERPOL Police Operation

An INTERPOL police operation to tackle online fraud has seen almost 1000 suspects arrested and the seizure of USD129,975,440 worth of virtual assets. Fraud investigators around the world worked together over five months (28 June – 23 November) to intercept money and virtual assets linked to a wide range of cyber-enabled financial crimes and money laundering, assisting countries to recover and return illicitly obtained funds to victims. Specifically targeting voice phishing, romance scams, sextortion, investment fraud and money laundering associated with illegal online gambling, Operation HAECHI III was coordinated by INTERPOL’s Financial Crime and Anti-Corruption Centre (IFCACC) which supported 30 countries via their respective INTERPOL National Central Bureaus (NCBs). In total, the operation resulted in the arrest of 975 individuals and allowed investigators to resolve more than 1,600 cases. In addition almost 2,800 bank and virtual-asset accounts linked to the illicit proceeds of online financial crime were blocked. Operation HAECHI III investigations generated the publication of 95 INTERPOL Notices and diffusions, and the detection of 16 new crime trends. Taking the profit out of financial crime Operation HAECHI III brought together law enforcement agencies, Financial Intelligence Units, asset recovery offices, prosecutors and private sector financial experts to identify illicit funds and money mules, detect money laundering activities and deactivate associated bank accounts. “The success of this operation is based on two key elements for law enforcement, follow the money and cooperation via INTERPOL. We have highlighted the need for greater efforts to deprive criminals of their illegal gains and this operation has seen member countries doing just that,” INTERPOL Secretary General, Jürgen Stock. International police cooperation during Operation HAECHI III unveiled several emerging online financial crime trends, particularly variations on impersonation scams, romance frauds, sextortion and investment frauds. Investigators also reported a surge in fraudulent investment schemes committed through the use of instant messaging apps where encrypted information is exchanged promoting the use of cryptocurrency wallets for payment. In one investigation, two Red Notice fugitives wanted by Korea for suspected involvement in a global Ponzi scheme were arrested in Greece and Italy after embezzling EUR28 million from 2,000 Korean victims. In another case, the Austrian and Indian NCBs identified a group of online criminals who had been impersonating INTERPOL officers, persuading victims to transfer some USD159,000 through financial institutions, cryptocurrency exchanges and online gift cards. Indian authorities raided the call centre, seizing four cryptocurrency wallets and other crucial crime evidence. “As we look to the future, we recognize the importance for decisive and concerted law enforcement action across borders. This year’s leg of Operation HAECHI III speaks volumes of IFCACC’s dedicated coordination and the strong commitment of participating countries, all of which foretell of new law enforcement victories ahead,” said Hyung Se Lee, Head of NCB Seoul. From test pilot to live policing tool: ARRP After several months of pilot testing, Operation HAECHI III saw investigators launch INTERPOL’s new global stop-payment mechanism, known as the Anti-Money Laundering Rapid Response Protocol (ARRP), which enables countries to work together to submit and handle requests to restrain criminal proceeds. Among many ARRP successes during the operation, NCBs Manchester and Dublin worked together to trace and seize some EUR1.2 million lost to business email scams perpetrated in Ireland. The funds were returned in full to the victim’s Irish bank account, and investigations continue. Since January 2022, in total the ARRP has helped member countries recover more than USD120 million in criminal proceeds from cyber-enabled fraud. HAECHI III participating countries: Australia, Austria, Brunei, Cambodia, Cote d’Ivoire, France, Ghana, Hong-Kong (China), India, Indonesia, Ireland, Japan, Korea, Kyrgyzstan, Laos, Malaysia, Maldives, Nigeria, Philippines, Poland, Romania, Singapore, Slovenia, South Africa, Spain, Sweden, Thailand, United Arab Emirates, United Kingdom, United States. The HAECHI III Operation is global in scope, conducted under the aegis of a three-year project to tackle cyberenabled financial crime supported by the Republic of Korea, with the participation of INTERPOL member countries on every continent.  

Read More

What does Responsible use of AI in Businesses Mean Today?

Artificial Intelligence is no longer just a cliched topic in the entertainment world. AI today has developed into a ‘must-have’ for every vertical from the government to basic applications on our gadgets. The use and dependency of AI especially in businesses have increased multifold, be it for understanding the customers or developing new products to suit the needs of the users. While the use of AI is opening up never-seen-before opportunities and possibilities for organizations across verticals, it also brings in incredible responsibility to safeguard the data and ensure transparency. Ethics seem to play a bigger part in ensuring that organizations take up a responsible path in using AI for their businesses. Data breaches, irresponsible use of the data collected and its processing using AI, and irresponsible use of AI to an extent of violating ethics have become the main concern for the people, government and businesses. A brand’s image is now connected to how responsibly they use AI which is at its disposal without breaching the trust of its customers. In February 2021, NITI Aayog released an approach document on ‘Principles for Responsible AI’ under the hashtag #AIFORALL. The document spoke about ethics, legal, social and technology, surrounding AI. While the Indian government is slowly approaching the subject, keeping in mind the need for AI and its impact on business, society and legal standpoint, the US and EU nations too have started working now on how to bring the responsible use of AI as part of the governance. Until there is an actual policy, which can be brought in regarding the responsible use of AI, the onus is on industry leaders and their organizations to ensure the safe and responsible use of AI in their businesses. So, what is responsible AI in businesses mean? F rench writer Voltaire said – with great power comes great responsibility, and AI is a power which many believe is only in its 1st leg of being discovered. The understand ing of what can be achieved by delving deeper into AI is only something that is being understood now. The veterans of the AI industry believe that ‘responsible’ means ethical and democratized use of AI – a tool, which is now available to any person, who has access to the technology. To elaborate, it is the practice of designing, developing and deploying AI with the intention to empower employees and businesses. Responsible AI’s target is to deliver trust, transparency and an unbiased approach to customers or users in the work environment. Organizations deploying AI should follow important practices and the right AI techniques that are compliant with new and pending guidelines and regulations of AI governance. This will help to deliver a trustworthy and transparent deployment. One might ask, why is AI needed for businesses when the risks and ethical dilemmas outweigh the uses as of today? The answer is simple – with AI, businesses have an edge in developing more robust and user-friendly products that help them stay a step ahead of their competition. The data collected helps businesses understand what exactly their customers are looking for and how they can deliver it. Today’s customer service is heavily dependent on AI and good customer service is what makes a brand successful. These are just a few instances of how AI can help businesses stay ahead during times when technology is the knight in shining armour. This is why one needs to understand the principles of Responsible AI that revolve around minimizing unintended bias, ensuring AI transparency, protecting data privacy and security, and benefiting clients and markets. Organizations deploying AI systems should keep these in mind and put them into practice to attain the desired deployment which is more ethical in compliance with Responsible AI. An eye on the following key facts for reaping the benefits of Responsible AI Data security has been and should be the top priority, so organizations deploying AI should use top-of-the-line data encryption practices. Use approved techniques such as customer lockboxes and data masking to protect the data from unauthorized access by other software. The AI-based products should have a human-centric design and once it is developed and deployed, they should go through regular operational routines for maintaining the whole idea of it being designed to be human-centric. The AI system should be developed to anonymize sensitive data of clientele and automatically delete the data after the purpose is fulfilled. Restricted data transfers between different stakeholders It is very important to put in place an explicit approval system for data access during service operations. A good amount of incident management training and Strict data usage policies can help in times of crises. Keep a check on risks and threats by performing regular audits and vulnerability assessments. Considering the above factors during AI system deployment will not only help in addressing the principles of Responsible AI but also help businesses develop ethically bound AI applications for their work operations.  

Read More

The 6 Technology Trends Affecting the Security Sector in 2023

By Johan Paulsson, CTO, Axis Communications The fact that technology has become pervasive in our personal and work lives is not news. This is largely due to the benefits that new technologies bring to business and citizens around the world in delivering new, more effective, and increasingly efficient services. However, the depth of technology’s integration into our lives, advances in its capabilities, and heightened awareness of its implications in society are also greater than ever and continue to accelerate. Given this, many of the broad macro trends around the globe – spanning geopolitical issues, economic uncertainty, environmental concerns, and human rights – have implications for all technology sectors, the security industry included. Ours is a sector making use of increasingly intelligent technology, one inherently involved in collecting sensitive data, and as impacted by geopolitical issues affecting international trade as any. Yet we’re still resolute in our view that our innovations will create a smarter, safer world. These are the six key technology trends that we believe will affect the security sector in 2023. A move towards actionable insights The increasing application of AI and machine learning have seen a focus on the opportunity for advanced analytics in recent years. Moving forward, the shift in focus will move from the analytics themselves, to the actionable insights they deliver in specific use cases. It’s less about telling you something is wrong, and more about helping you decide what action to take. A key driver for employing analytics to deliver actionable insights is the huge increase in data being generated by surveillance cameras, along with other sensors integrated into a solution. The data (and metadata) being created would be impossible for human operators to interpret and act upon quickly enough, even with huge and costly increases in resources. The use of analytics can drive real-time actions which support safety, security, and operational efficiency. From prompts to call emergency services in the case of incidents, to redirecting traffic in cities to alleviate jams, to redeploying staff in busy retail outlets, to saving energy in buildings through more efficient lighting and heating, analytics are recommending, prompting, and even starting to take the actions that support human operators. Beyond ‘live’ actionable insights, analytics can support in forensic analysis post-incident. Again, given the vast amount of data being created by surveillance cameras, finding the relevant views of a scene can take significant time. This can hinder investigations and reduce the likelihood of suspects being found. Assisted search addresses this issue, helping operators quickly find individuals and objects of interest among hours of footage. Finally, proposed actions promoted by analytics are increasingly forward-looking. Downtime in industrial sites and factories can be costly. A combination of sensors allows intelligent analytics to propose preventative maintenance ahead of outright failure. ‘From analytics to action’ will become a mantra for 2023. Use case-defined hybrid architectures As we’ve highlighted in previous technology trends posts, it’s now commonly accepted that a hybrid technology architecture is best-suited for security systems, mixing on-premise servers, cloud-based compute, and powerful edge devices. No one architecture fits all scenarios, however. But here lies the solution – first assess what needs to be addressed in your specific use case, and then define the hybrid solution that will meet your needs. A number of factors need to be considered. Undoubtedly the advantages of advanced analytics embedded in surveillance cameras on the edge of the network are clear to see. Analysis of the highest-quality images the instant they are captured gives organizations the best chance to react in real-time. Equally, the data generated by surveillance cameras is now useful beyond the real-time view. Analysis of trends over time can deliver insights leading to operational efficiencies. This analysis often demands the processing power found in on-premise servers or the cloud. And of course, there are the requirements – often defined by regulation – around data privacy and storage that vary from country-to-country and region-to-region. These can define the difference between on-premise storage and the use of the cloud. What’s essential is not to tie yourself to a single architecture. Remain open, give yourself the flexibility to create the hybrid architecture best suited to your specific needs. The emergence of cybersecurity sub-trends The importance of cybersecurity is also highlighted through the requirement to remain compliant. For instance, the proposed European Commission’s Cyber Resilience Act will place greater demands on producers of hardware and software across all sectors to ensure the cybersecurity of their products, through fewer vulnerabilities at launch, and better cybersecurity management throughout the products’ lifecycles. The security and surveillance sector will, of course, be included. The Act demonstrates both the importance and the complexity of cybersecurity. No longer can it be seen as one subject, but rather several interlinked areas. Some of these are well established, but others are emerging. In the video surveillance sector, cybersecurity measures that ensure the authenticity and safety of data as it is captured and transferred from camera to cloud to server will be essential to maintain trust in its value. We will see a more proactive approach by technology vendors in identifying vulnerabilities, with ‘bug bounty’ programs becoming commonplace to incentivize external parties. And customers will expect transparency regarding the cybersecurity of security solutions, with a Software Bill of Materials becoming standard in assessing software security and risk management. Beyond security One of the most significant trends for the security sector, and with it an equally-significant opportunity, is the move beyond security. Surveillance cameras have become powerful sensors. The quality of video information they capture, in all conditions, has increased year-on-year for decades. Today, through advanced analytics, they also create metadata – information about the video data – which adds another layer of information and value. This of course improves and enhances their ability to support safety and operational efficiency use cases in addition to security. The opportunity now exists to combine the data created by surveillance cameras with that from other sensors – monitoring temperature, noise, air and water quality, vibration, weather, and more…

Read More

Protecting the Piazza Lucio Dalla

The Piazza Lucio Dalla in the Comune di Bologna is a covered square of 5,882 square metres that has recently been restored and inaugurated in Summer 2022. Named after Bolognese singer-songwriter, musician and actor Lucio Dalla, the space will become the new ‘Piazza Grande’ for Bologna, according to Matteo Lepore, mayor of Bologna. The square hosts a range of events and entertainment for people of all ages, including concerts, theatre performances, street food and children’s workshops. The new space is also a meeting point that can be used in all weathers thanks to the canopy designed by architect Renato Bernardi in the 1950s. A durable security system As part of the restoration, the city authorities realised the need for a video surveillance system that could monitor the square in all conditions, morning and night. Wisenet Q Series PTZ cameras were chosen due to their reputation for durability and robustness, the image quality delivered and the complete integration with the monitoring system already in use in the control rooms. The cameras are installed across the square, with pan, tilt, and zoom cameras chosen to move easily across the square when investigating an event or tracking a person of interest. The cameras provide up to 23x optical zoom, with IR LED to monitor images clearly in low light conditions. They can identify objects up to 100 metres away in Full HR resolution. Intelligence built-in The cameras also come with built-in analytics, including motion detection, directional detection, virtual line, enter/ exit, and tampering, to allow more accurate control by the authorities and the operators. The system integrates with Genetec Security Center Video Analysis, and video feeds are monitored by the local police operational centre. Future innovation Comune di Bologna is currently undergoing a digital transformation as part of the local Digital Agenda. “It was important that we implemented the right technology as part of the restoration of Piazza Lucio Dall. The Wisenet cameras play an important role in keeping people using the busy piazza safe and secure, but also integrate with other systems, including Genetec’s, to improve collaboration across departments and agencies. It also gives us greater options for exploring future integrations – as the Settore innovazione digitale e dati initiative includes IoT and 5G technologies,” explained Ing. Alberto Nuzzo, Head of Office ‘Digital Infrastructure’ presso Comune di Bologna.  

Read More

Old Spaghetti Factory Restaurants Choose Interface to Modernize Network, Voice, and Physical Security

Interface Systems, a leading managed service provider delivering business security, managed network, UCaaS, and business intelligence solutions to distributed enterprises, recently announced that The Old Spaghetti Factory (OSF), a family-owned and operated restaurant chain with over 40 locations across 13 states, has chosen Interface’s suite of managed services to transform its network, voice and security infrastructure. Network Upgrade The OSF IT team wanted to standardize network equipment across all their locations to increase efficiencies and reduce downtime. Since implementing Interface’s restaurant-networkin-a-box, which guarantees 99% uptime and includes 4G wireless WAN failover, OSF has experienced significantly better network uptime resulting in improved employee productivity, and better guest experience. “Interface’s restaurant-networkin-a-box has allowed us to upgrade to a high-speed, secure network at all our locations and reduced the need for our employees to spend time troubleshooting network issues,” explained Travis Crownover, Director of IT at The Old Spaghetti Factory. Physical security OSF’s legacy alarm systems were complex to manage and maintain. To improve security, Interface deployed a managed alarm solution. The new solution includes a mobile application that enables OSF employees to arm or disarm alarm systems via smartphones, and easily manage alarm systems at any location they are deployed to without additional training. The managed alarm solution has streamlined security operations and reduced operating costs. “By making the switch to Interface for intrusion monitoring, we realized a cost savings of at least 30%,” said Crownover, “Our restaurants rely on our IT department and Interface has really helped us take a lot of the workload off of our own IT team.” Replacing an outdated phone system OSF’s aging phone systems made operations difficult due to poor call quality and a lack of flexibility when systems failed. OSF chose to replace their phone system with Interface’s business VoIP solution. “Interface’s phone system gives us improved call quality and the auto-attendant feature allows us to handle customer calls at scale,” said Crownover.  

Read More

For the Third Consecutive Time, HID is the Smart Ticket Producer for FIFA World Cup 2022

HID, a worldwide company in trusted identity solutions, announces it is for the third consecutive time the smart ticket producer of FIFA World Cup, one of the largest and most popular sporting events in the world. This year, HID is also providing a fully custom solution for outer-perimeter access control and all exit gates to ensure a smooth exit and facilitate emergency evacuations. Featuring eight stadiums spread across five Qatari cities, the Middle Eastern country expects more than 1.2 million visitors to attend the games, happening from November 20 to December 18. Counterfeiting is a concern of event organizers, so FIFA relied on HID to deliver approximately 2 million paper tickets manufactured with unique security features, including a Radio Frequency Identification (RFID) inlay. Unlike barcoded tickets, which can be counterfeited more easily, RFID transmits the unique identity of a ticket and ticket holder via radio waves. And because RFID scanners do not need a direct line of sight like traditional barcode scanners, ticket validation is frictionless, dramatically speeding up admissions in high-volume events such as World Cup matches. “It is exciting to see our smart ticket solutions help fuel the fan experience for one of the world’s largest and most-watched events,” said Björn Lidefelt, EVP and Head of HID, “Helping bring the world together for an event like the World Cup is what our technology is all about.” As part of the project, HID is also providing personalization solution for the secure tickets, including self-service kiosks for media seat assignment tickets, cabinets for tickets instant issuing with special printers for on-the-go ticket personalization, thousands of handheld scanners and on-site support during each match. An accompanying Event Management Platform (EMP) from HID will provide real-time data and reporting through several user-friendly dashboards, which will help security officials and event organizers to remotely monitor and manage everything from the number of attendees at each entry and exit point to media credentialing and crowd control. Novel solution with limitless potential HID was also requested to provide an outer-perimeter access control layer of security checks in each stadium and training fields across the country. To support this, hundreds of gates embed a new, patent-pending, UHF booster technology developed by HID, which serves as a companion device for common UHF readers to enhance the RFID tag reading capacity in challenging use cases. Units are integrated within the HID EMP for real-time events tracking and monitoring of the system health. Most importantly, this all happens automatically to maintain a seamless flow in and out of the gates, and ensure optimum user experience for the fans. “Having real-time data of when ticket holders are going in and out of the perimeter is crucial for event organizers to ensure the best possible experience for fans to accredited people, as well as obtain intelligence as to where a particular gate needs more attention in terms of crowd control and emergency evacuation,” explained Cesare Paciello, HID’s Vice President of Events and Mobility Solutions for Identification Technologies and head of the project.  

Read More

Hikvision’s Classroom Hub Solution Offers Convergence of Real, Digital and Virtual Classrooms

The movement toward informatization in education is continually being pursued. Also, students growing up in a technological world are eager for more immersive learning experiences and better education resources. Hikvision’s Classroom Hub stands at the forefront of this movement, extending real classrooms to digital, virtual classrooms, bridging all kinds of gaps between teaching and learning. This solution overcomes a variety of challenges by offering digital teaching, remote learning, and multi-classroom instruction. The Classroom Hub Solution empowers all educational staff to enjoy more connectivity, engagement, and learning breakthroughs using our smart teaching assistant, easy-to-use software, and collaboration of multiple applications. In-class applications Challenges In conventional classrooms, teaching tools offer limited formats for writing, illustration, and other resources, which also makes learning very challenging for the students sitting in the back row or students with other learning difficulties. Moreover, classroom-bound teachers need a whole host of tools to create lessons, including chalk, markers, a projector, chalkboard or whiteboard, pointer, and so on. ‘Teaching’ and ‘efficiency’ do not commonly go together. Hikvision’s Interactive Flat Panel presents a new kind of intelligent teaching assistant. It integrates the latest technologies in touch controls, high-definition display, video processing, network communications, interactivity, and audio features, with abundant third-party teaching resources available as well. Teachers can intuitively create digital instruction to boost the learning environment and experience, enjoying more interactivity with students. Benefits Easy wireless projection from a smartphone, iPad, PC or Mac, sharing multimedia teaching materials across multiple teaching formats With flexible white board software, users will enjoy more powerful visual experiences than with a traditional blackboard. Equipped with world-class, cutting-edge panel technologies, a great display, flexible visual aids, and better eye protection can be guaranteed. Educators can explore more possibilities with the openness to third-party applications from Window or Android. Features 150 mesh, ultra-fine sandblasting frame for an extraordinary user experience. Filters out >90% ultrashort-wave blue light to protect eyes. Supports up to 4 terminals projecting simultaneously via window splicing. Up to 20-point IR touch sensitivity so several people can use the panel display at the same time.  

Read More

A Focus on Emerging Threats: Cybersecurity Awareness Month

In 2022, cybercrime is ever-increasing, and the number of attacks and bad actors continues to increase exponentially. As soon as we’ve learned to eliminate a threat, perpetrators are creating new ways to breach networks. It can feel like a never-ending cycle. And it is no surprise because successful attacks on Medibank, the Colonial Pipeline, and SolarWinds demonstrate the significant need for cybersecurity efforts that act differently than traditional practices. A holistic approach must be defined and expanded to cover applications and workloads during runtime wherever they may reside to protect our enterprise systems better. This is the only way to ensure that the correct code and processes can execute and nothing else, regardless of the threat environment. Cybercrime’s threat to individuals and organizations leaves them feeling anxious, thinking about the possibilities that can take place without appropriate security practices or solutions. In response to this increasing threat, we as an industry must commit to being as proactive as possible by educating, training, and staying updated on security-leading practices. As you can imagine, our cybersecurity strategies have undergone immense changes over the years, and significant strides have been made by security teams across the globe. Since its introduction in October 2003, Cybersecurity Awareness Month (CSAM) has brought greater awareness to this global issue. Leaders and employees have been more aware of their role in mitigating threats, while ISOs and CISOs worldwide are now developing greater Security Education Training and Awareness (SETA) programs. The bottom line is that security knowledge should be focused on awareness for all, training employees with key roles, and educating cybersecurity specialists. SETA programs are not a one size fits all, and many now include phishing exercises, tabletop security incidents rehearsal, and simulated attacks with Red and Blue teams. The theme of this year’s CSAM campaign is ‘See Yourself in Cyber,’ demonstrating that while cybersecurity might seem complex, it is all about teamwork. ACRE recognizes that all members of an organization play a role in defending our organization’s data, assets, and employees. We also all play a part in protecting personal data in our day-to-day life. Currently, employees need to keep a mindset of security in all tasks that they complete, whether cyber or physical. Supporting this initiative is our SETA program, which is designed to promote cybersecurity awareness. Additionally, our team has developed other campaigns to enhance our employee’s overall security knowledge through workshops, assessments, and security incident scenario rehearsal to help reduce our security risks. Regarding our security solutions, ACRE strives to balance our security strategy with our core product pillars of identifying, protecting, detecting, responding, and recovering. Adhering to cybersecurity best practices, we actively train our specialists to be conscious of security and data protection in every step of the product lifecycle from the initial concept through retirement. In a world where ever-evolving technology produces incredible innovations, it raises threats more than ever before. We believe that one factor contributing to this is the risk of complacency. Any organization that believes it is doing enough or becomes too negligent in security strategies could be heading down a dangerous path. Organizations must stay engaged and vigilant and remain dedicated to keeping their employees, suppliers, and customers informed. After all, security is and will always be a team effort.  

Read More

Commvault Witnesses Significant Momentum in India for Metallic Portfolio Running on Microsoft Azure

Commvault, a recognised global enterprise company in intelligent data services across on-premises, cloud, and software as a service (SaaS) environment, recently announced an excellent momentum for its SaaS division Metallic in India since it was made available in the country three quarters ago. Metallic’s rapid growth in India is a testament of the successful collaboration between Commvault and Microsoft, offering two cloud technologies – Microsoft Azure and Metallic SaaS – to meet the need for proven data protection backed by powerful scale and multi-layered security for Indian enterprises. One of the key reasons behind Metallic’s success is that it was built in the cloud, using the best of Azure’s native capabilities while leveraging Commvault’s enterprise technology – the same technology stack that large enterprises have entrusted to protect their mission-critical apps and data. Additionally, with features such as air-gapping and eDiscovery, Metallic enhances protection of data across SaaS offerings, such as Microsoft 365, Microsoft Dynamics 365 and more, in the case of accidental deletion, corruption and malicious attacks, in the cloud and beyond. “As the threat landscape continues to evolve, it is imperative to support our customers with holistic data protection solutions in their digital transformation journey. Benefitting from the secure and hyperscale cloud capabilities of Microsoft Azure, Metallic SaaS delivers a powerful solution for storing and protecting business-critical data for enterprise organizations. Our joint customers are already beginning to witness tremendous value through the collaboration between Commvault and Microsoft,” said Aditee Rele, Director – ISV, Global Partner Solutions, Microsoft India. Since its global launch two years ago, Metallic has experienced amazing growth and accomplished what most start-ups would dream of: Rapid-fire portfolio expansion – more than tripling our offerings from global launch. Growing from 1M to $50M ARR in six quarters. Expansion to serve more than 2,000 customers, with availability in more than 30 countries around the globe. Launched an access programme for ThreatWise, the company’s new offering following its acquisition of TrapX. In India, several customers including IndiGrid, Indiassetz, Marcellus and India Glycols, among others have highly gained from its association with Metallic to move fast, stay agile, and put security first as they modernize their business. “Commvault delivers a structured backup and recovery solution, which is both fast, reliable, simple to manage. In today’s hyper connected world, it’s not just the product that holds fort for us, it’s support and expert services are equally important to drive adoption. Commvault team has been engaging, responsive and trustworthy, supporting us to achieve desired business outcomes. Using Commvault, we have not only seen a three-fold improved productivity of the infrastructure team but also minimized security risks, address regulatory compliances through a robust data strategy”, said Atul Govil, Chief Transformation Officer & Head (SAP & IT), – Corporate, India Glycols Ltd. “Metallic is an easy-to-learn, easy-to-implement and easy-touse solution. We especially liked its simplified interface and unlimited storage across endpoint backups, Microsoft 365 and Salesforce, ensuring our data is always available and rapidly recoverable, even in case of a disaster,” shared Siddharth Joshi, Technology Head, Marcellus. Vinay Khot, Chief Technology Officer, Indiassetz, commented, “With silent backup and granular restores, Metallic Endpoint Protection secures laptop data without impacting our Employee Productivity.” “Metallic is what I would call, the best of both worlds. Its virtual air-gapped infrastructure and a built-in Zero Trust approach delivers uncompromised data security while a predictable subscription model ensures long-term savings, with no capex investments”, said Aryan Panchal, Chief Digital Officer, IndiGrid. Balaji Rao Area Vice President, India and SAARC, Commvault “Data is an enterprise’s crown jewel, and the demand for a powerful data management solution is at an alltime high. Metallic has proven to be a game-changer in this dynamic business landscape in India, with our customers tackling even the most complex data problems with ease. Through our collaboration with Microsoft, we will continue to empower enterprises with innovative and trusted solutions” Metallic, A Commvault venture, was established to bring next-generation software-asa-service (SaaS) data protection to the market, delivering Commvault’s powerful core technology simply through the cloud. Together with its partners, Metallic offers a growing portfolio of SaaS backup and recovery solutions to help today’s companies keep their data protected, compliant and safe from deletion, corruption and attack. Metallic operates as a division of Commvault. Commvault believes in data readiness. Commvault helps organizations of all sizes intelligently manage data through solutions that store, protect, manage and use their most critical asset – their data. Commvault software, solutions and services are available from the company and through a global ecosystem of trusted partners. Commvault employs more than 2,300 highly-skilled individuals across markets worldwide.  

Read More

Professional Stealers: Opportunistic Scammers Targeting Users of Steam, Roblox, and Amazon in 111 Countries

Over 50 million passwords stolen in 7 months of 2022 Underground market value of stolen logs and compromised card details around US$5.8 million India saw the highest number of infected devices in the Asia Pacific, followed closely by Indonesia, Philippines and Vietnam Group-IB, one of the leading global players in cybersecurity, has identified 34 Russian-speaking groups that are distributing info-stealing malware under the stealer-as-a-service model. The cybercriminals use mainly Racoon and Redline stealers to obtain passwords for gaming accounts on Steam and Roblox, credentials for Amazon and PayPal, as well as users’ payment records and crypto wallet credentials. In the first seven months of 2022, the gangs collectively infected over 890,000 user devices and stole over 50mn passwords. All the identified groups orchestrate their attacks through Russian-language Telegram groups, although they mainly target users in the United States, Brazil, India, Germany, and Indonesia. In 2022, info-stealing malware has grown into one of the most serious digitalthreats. Classiscam graduates By tracking the evolution of the popular scam scheme Classiscam, Group-IB Digital Risk Protection analysts revealed how some ‘workers’ (lowrank online scammers) started shifting to a more dangerous criminal scheme that involves distributing info stealers. Moreover, the illicit business of stealers, which is coordinated via Telegram groups, uses exactly the same operational model as Classiscam An info stealer is a type of malware that collects credentials stored in browsers (including gaming accounts, email services, and social media), bank card details, and crypto wallet information from infected computers, and then sends all this data to the malware operator. After a successful attack, the scammers either obtain money themselves using the stolen data, or they sell the stolen information in the cybercriminal underground. According to Group-IB, stealers are one of the top threats to watch in the coming year. The threat actor responsible for the most recent attack on Uber purchased the credentials compromised with the Racoon stealer. According to the Group-IB Digital Risk Protection team, (part of the Unified Risk Platform), the mass Telegram groups and bots designed to distribute info stealers first appeared in early 2021. By investigating a number of accounts, Group-IB analysts were able to confirm that members of several scam groups that previously participated in the Classiscam scheme began using stealers. In 2021 and 2022, Group-IB experts identified 34 active groups on Telegram. On average, such info stealer distribution groups have around 200 active members. The most popular stealer among the groups examined by Group-IB is RedLine, which is used by 23 out of 34 gangs. Racoon ranks second: 8 groups employ this tool. Custom stealers are used in 3 communities. Administrators usually give workers both RedLine and Racoon in exchange for a share of the stolen data or money. However, the malware in question is offered for rent on the dark web for $150-200 per month. Some groups use 3 stealers at the same time, while others have only one stealer in their arsenal. Having switched from scamming users of classified websites to stealers, some threat actors reproduced not only the hierarchy and model of Classiscam, but also its technical capabilities. In particular, Telegram bots that generate malicious content, communication between members, and all their shady accounting. The tasks of workers, the scammers of the lower-ranks, have also changed – they must now drive traffic to bait scam websites impersonating well-known companies and convince victims to download malicious files. Cybercriminals embed links for downloading stealers into video reviews of popular games on YouTube, into mining software or NFT files on specialized forums and direct communication with NFT artists, and into lucky draws and lotteries on social media. Telegram Stealers world tour Group-IB estimates that between March 1 (when Group-IB started researching the scheme) and December 31, 2021 stealers operated via Telegram groups were able to compromise 538,000 devices. In the first 7 months of 2022, Telegram stealers were found to be almost twice more active infecting more than 890,000 devices in 111 countries. The top 5 most often attacked countries in 2022 were the United States, Brazil, India, Germany, and Indonesia with 91,565, 86,043, 53,988, 40,750, and 35,345 infected devices respectively. List of countries in Asia Pacific by the number of infected devices include India, Indonesia, Philippines, Vietnam and Singapore. In India for example, from March to December 2021, the operators of the stealers in question infected 19,249 devices. In the first seven months of 2022, the number grew to 53,988. Scammers were able to retrieve 4,547,020 passwords, 4,657 sets of payment records, and 4,428 sets of crypto wallet information such as credentials, seed phrases, etc. Indonesia closely follows with a total of 35,345 infected devices and where scammers were able to retrieve 2,372,893 passwords. The Philippines recorded a total of 31,745 infected devices and Vietnam with a total of 22,739 devices infected and scammers retrieving 2,032,278 passwords. Australia had 5,794 devices infected and 549,640 passwords retrieved by scammers. Singapore saw 2,179 devices infected, with 185,689 passwords retrieved. According to the analysis of Telegram groups, for the last 10 months of 2021 cybercriminals collected 27,875,879 sets of passwords, 1,215,532,572 cookie files, 56,779 sets of payment records, and data from 35,791 crypto wallets. In the first 7 months of 2022, threat actors stole 50,352,518 passwords, 2,117,626,523 cookie files, details of 103,150 bank cards, and data from 113,204 crypto wallets. The underground market value of just the stolen logs and compromised card details is around $5.8 million, Group-IB experts estimate. According to Group-IB, in 2021, threat actors worldwide most frequently collected PayPal account credentials (more than 25%) and Amazon credentials (more than 18%). In 2022, the most targeted services are the same, namely PayPal (more than 16%) and Amazon (more than 13%). However, over the course of the year, cases of stealing passwords for gaming services (Steam, EpicGames, Roblox) in the logs have increased almost five-fold. “The influx of a huge number of workers into the popular scam Classiscam – which Group-IB’s Unified Risk Platformidentified, at its peak, comprised over a thousand criminal groups and hundreds of thousands of…

Read More