Information Stolen from 24 Indian Banks

Wallets will be next I am guessing. There is no security in India. Is PM doing something about information security of these bank and wallet sites or we are all going cashless and one day could become truly cash less

Researchers from US-based cyber security company FireEye have claimed discovering malicious phishing websites created by cyber criminals that spoof 26 Indian banks to steal personal information from customers.

FireEye identified a new domain (csecurepay[.]com) that was registered on October 23 this year and appears to be an online payment gateway but actually is a phishing website that leads to the capturing of customer information from 26 banks operating in the country, the company said in a statement on Thursday.

In this phishing attack, victims are asked to enter their account number, mobile number, email address, one time password (OTP) and other details. Once the information is collected, the website displays a fake failed login message to the victim.

The phishing site served fake logins from 26 banks, including HDFC Bank, ICICI Bank, IDBI Bank, State Bank of India, among others.

This is how it works. When navigating to the URL, the domain appears to be a payment gateway and requests that the user enter their bank account number and the amount to be transferred. The victim is allowed to choose their bank from a list.

In the next step, the malicious website requests the victim to enter their valid 10-digit mobile number and email ID which makes the website appear more legitimate.

"The victim will then be redirected to the spoofed online banking page of the bank they selected and are requested to login," FireEye said.

After entering their login credentials, the victim will key in their OTP and once all the sensitive data is gathered, a fake failed login message such as "Some error occurred. Try after some time" will be displayed to the victim.

"Criminals follow the money and as more Indians embrace online banking, criminals followed them online. As the digital economy grows, consumers should be aware of the risks that accompany the convenience," noted Vishak Raman, Senior Director for India and Saarc at FireEye.

Using the registration details of this domain, FireEye security researchers identified a second domain (nsecurepay[.]com) registered by the same attacker in August 2016 and appeared to be created to steal credit and debit card information, including ICICI, Citibank, Visa and MasterCard and SBI debit card details.

"The ease of online payments opens new avenues for criminals to trick consumers into divulging their own sensitive banking information. The growing sophistication of these cyber criminal campaigns makes them harder for consumers to identify and firewalls and antivirus technology do not stop these attacks," Raman added.

FireEye said it has notified the Indian Computer Emergency Response Team (CERT-In), which is under the Ministry of Electronics and Information Technology, about the threat. more  

View all 33 comments Below 33 comments
Thanks all for appreciating more  
Mr.Mittal, Thanks for this early warning. Its surely going to affect us in future transactions. We should initiate a campaign so that the Ministry in GOI could take steps to check it more  
This is helpful more  
online transactions are being encouraged by banks and government too. But no one is telling we are safe with online transactions. some minister was promising that necessary steps will be taken for cyber security.even the computer literates are being cheated. what will happen when uneducated and the under educated also start operating on line transactions. recently some data regarding the debit cards was stolen as per the news reports. Banks advised the customers to take chip cards. when it is responsibility of the banks to provide security, they should replace the old cards with chip cards also. Many customers who are not aware of the news may not even apply for new card. banks are no more service oriented they are business houses now. without having confidence about cyber security it may be risky to go cashless society. our first target be cyber security. more  
Post a Comment

Related Posts

    • DOES THE VULGURITY IS THE MATTER OF MIND ?

      Dear Parvati, Thanks and regards for your concern about the vulgar ads. Today, it is not only the matter of IPL but you open any channel and you will find these things everywhere.The extreme ...

      By KUNAL PARADKAR
      /
    • Vulgar ads during IPL

      I don’t understand why this asci and consumer affairs ministry are such big failures in regulating vulgar and surrogate ads. Children are watching IPL matches and these models in l...

      By Parvati Sharma
      /
    • Ola uber have become autod

      Why should I pay an extra 100-150 bucks for a cab when they're just like autos, without ACs because drivers won't turn them on? Seriously, what's the incentive to choose cabs anymore?

      By Anshu Saxena
      /
    • Fire the advertising association

      See the kind of ads that are being given in news papers. The advertising association in India fails to act as usual as 90% advertisers dont care about them. Govt regulator needs to get really activ...

      By Sobhita D
      /
    • Go air needs to be booked for violating DGCA order.

      Instead of giving cash refund for cancelled flights Go Air is issuing credit notes despite DGCA order. Passengers want money back not their lame credit notes.

      By Dipali Yadav
      /
    • Shameless celebrities of India

      Money perhaps is most important in life.Amitabh Bacchan had once said he is canceling his contract yet we still see him everyday on the screen. No offence meant to any of these personalities but it...

      By Krishnan Venkatachalam
      /
    • Shameless celebrities of India

      It has come down to Sunil Gawaskar and Virendra Sehwag now advertising for Kamla pasand after we raised hell about Shahrukh, Akshay Kumar, Ajay Dewgan and Amitabh Bachchan. And consumer...

      By Mala Sehgal
      /
    • Surrogate and Inappropriate advertising

      Front page of newspaper yday advertising pan masala and gutka. With areca nut being a proven carcinogen and a psychoactive compound. Will our authorities please do something and save the lives of ...

      By Ruchika L Maheshwari
      /
    • Are competitive coaching institutes misleading students

      And parents. See attached, all the top institutes claiming that the same topper students studied at their institute. Parents and students looking at 1 ad at a time get misled.

      By Sneha Goyal
      /
    • Loot in India on iphones

      IPhone 14 Pro max price in Official Apple store, in Thailand is 45k bhat = INR 1.07 lakh. Price in India = 1.4L. Difference of 33k will cover return air-fare. Why do you ...

      By Ruchika L Maheshwari
      /
    • Mahindra Car Manufacturing defects issues

      I am a customer of Mahindra Scorpio N Vehicle and it is having Manufacturing defects from Day 1, Company dealers are doing trail and error and problem is not solved yet. They are spoiling vehicle w...

      By GIRISH M R
      /
Share
Enter your email and mobile number and we will send you the instructions

Note - The email can sometime gets delivered to the spam folder, so the instruction will be send to your mobile as well

All My Circles
Invite to
(Maximum 500 email ids allowed.)