Cybersecurity
Practical cybersecurity news — vulnerabilities, breaches, defense techniques, and best practices.
Government of India warns on Instagram Account Takeover campaign using online advertisements
India’s Indian Cyber Crime Coordination Centre (I4C) has warned that fake AI trading ads on social media are being used to hijack Instagram accounts. Victims are asked to fill in a sign-up form and enter a “verification code” that is actually their Instagram login code. Citing Meta, I4C said 16,000 such cases surfaced in one month.
India’s mule SIM trade: UP Police arrest man for selling SIMs activated with stolen biometrics
Police in Sitapur, Uttar Pradesh, have arrested a man accused of misusing a point-of-sale agent ID and people’s biometrics to activate SIM cards in their names and sell them on. Officers seized 25 SIM cards, five phones and a motorcycle. Such “mule SIMs” hide the real user and are widely used in cyber fraud.
India’s busts online gaming betting scam ring; Mahadev, Lotus, MY99 apps used
India’s UP Police have arrested two people and placed one juvenile under watch in an alleged online gaming and betting fraud that used fake social media ads, WhatsApp and WATI groups, and sites including Mahadev Game, Lotus Game, MY99 and MY REDDY 99. Officers seized ₹15 lakh in cash and digital evidence of crores in transactions.
Pakistan’s NCCIA Lahore arrests 38 in Faisal Town and Johar Town scam centre raids • Foreign Nationals Targeted
NCCIA Lahore detained more than three dozen people in raids on alleged illegal call centres in Faisal Town and Johar Town, the agency said on 4 October 2026. The lineup photo shows 38 people besides three officers. The centres allegedly targeted people abroad with fake mobile upgrades and network packages, using dial-up software.
Gay Dating App Scam: How Criminals Turn Online Dating into a Trap
Wathoda police arrested Antariksh Mishra, 19, and Amit Patil, 23, after a 27-year-old hospital technician was allegedly lured through a gay dating app to an isolated spot near Bahadura Phata, threatened with a knife and robbed at an ATM, Lokmat Samachar reported on 4 October 2026. The case is a dating-app contact that moved offline into extortion.
India demonstrates its first 5.56 km free-space quantum key link, from BISAG-N to IIT Gandhinagar
India has demonstrated its first free-space quantum key distribution link, 5.56 km between BISAG-N and IIT Gandhinagar, PIB said on 3 October 2026. QNu Labs’ Armos system held the error rate under 5 percent and produced keys at 230–260 bits per second, which BISAG-N’s Vedic Kavach platform used to encrypt and decrypt test messages.
Cybercriminals using FUD (Fully Undetectable) crypter services for malwares: Interpol Report
INTERPOL's Industrialization of Cybercrime report uses FUD once, as Fully Undetectable: crypter, packer, and anti-detection services sold so malware looks clean to antivirus and endpoint tools. Vendors re-wrap files, test them until scanners report them clean, and sell that result per test or by monthly subscription, often with proxies, VPNs, and anti-detect browsers. The report gives no FUD price, volume, or named product.
Threat analysis: Google Sites phishing that fools password managers via sites.google.com
Threat analysis of a Google Sites phishing kit reported by @VincentBounce: spoofed Google ‘app password / security alert’ mail, landing on sites.google.com/view/delete-new-app with CAPTCHA theatre, credential forms that trigger password-manager autofill, and mailed-by fwd.privateemail.com instead of Google bounce hosts. Includes IOCs and defender checklist.
Bidhannagar Police bust New Town tech-support call centre preying on US victims; 24 arrested
Bidhannagar City Police raided an illegal call centre styled as Xtra source Pvt. Ltd. in Eco Space, New Town, arresting 24 people (13 women, 11 men) for tech-support scams targeting US victims via Amazon/Apple impersonation, remote access, and gift vouchers. Seized: 53 desktops, 4 laptops, 24 phones, and scam scripts.
Bitget Hot Wallet Hack: SlowMist Finds Zero-Day Breach and Custom Withdrawal Tool as MetaMask Flags Infrastructure Incident
SlowMist’s Bitget IR progress report (as of 29 Sep): Product A 0-day from 31 Aug, Product B admin abuse on 25 Sep, custom withdrawal tool forging risk controls, multi-chain drain ~2h52m from 02:31 UTC+8, later forged BTC withdrawal attempts. Private keys/cold wallets reportedly not compromised.
Meta suicide alert helps UP Police rescue Bareilly youth within 10 minutes
UP Police rescued an 18-year-old in Bareilly within 10 minutes after Meta flagged his Instagram self-harm post and alerted the force’s Social Media Centre. Brief on how Meta’s suicide-risk warning system works with police. Source: @Uppolice.
Mudra Loan Impersonation Scam busted, Andhra Pradesh residents targeted
Kolkata Police report that an inquiry into fraudulent SIM procurement uncovered a multi-state cyber-fraud operation. Following the arrest of Taushif Alam on 17 September 2026, officers raided a flat in Hatiara under Eco Park Police Station used as an alleged fraudulent call centre, arresting seven individuals from Andhra Pradesh and Telangana. The accused are alleged to have impersonated MUDRA Loan representatives and induced residents of Andhra Pradesh to transfer funds. Mobile phones and noteb