Nitin Pandey at RESTCON On Combating Cyber Threats

1. CYBER THREATS IN INDIA ARE WE REALLY PREPARED? NITIN PANDEY– August 30, 2020

2. INCREASING CYBER CRIMES IN INDIA INDIA IS RAPIDLY STEPPING TOWARD DIGITALIZATION IN THE GOVERNANCE OF PRIME MINISTER MODI. GOVERNMENT INITIATIVES SUCH AS DIGITAL INDIA ARE BRINGING TECHNOLOGICAL POWER IN INDIA. WE EXPLORE USING INTERNET AND MADE LIFE EASY AND COMFORTABLE. WE EXPLORE THE UNKNOWNS AND COMMUNICATE WITH VIRTUALLY ANYONE, ANYTIME, ANYWHERE ACROSS THE GLOBE. DIGITAL SPACE HAS OPENED DOORS TO CYBER CRIMINALS AND MOSTLY WOMEN ARE THEIR TARGET. CYBER CRIME HAS EMERGED AS A MAJOR CHALLENGE FACING LAW ENFORCEMENT AGENCIES IN THE COUNTRY, WOMEN AND CHILDREN REMAIN AT RISK.

3. INCREASING CYBER CRIMES IN INDIA • CYBER CRIME IS HAPPENING EVERYDAY! • CYBER ATTACKS ARE: • UNEXPECTED • UNSEEN • UNAPPROACHABLE • UNKNOWN • DO YOU FEEL SAFE?

4. INDIA RANKS NO. 1 SOURCE: 3DAYHACK

5. WE RANK NO. 1

6. WHY HAPPENING? CYBER THREATS ARE RAPIDLY INCREASING IN INDIA, EVERYDAY CASES OF CYBER BULLYING, EXTORTION, FRAUDS, HARASSMENT ARE INCREASING RAPIDLY, ESPECIALLY AGAINST WOMEN & TEENS.

7. WHY HAPPENING? LOOPHOLES IN LAW ENFORCEMENT LAW ENFORCEMENT AGENCIES OF INDIA ARE OUTDATED, UNTRAINED AND MOST CYBER CELLS ARE INCAPABLE IN SOLVING CYBER CRIME RELATED CASES LACK OF AWARENESS ONE OF THE MAJOR REASONS IS LACK OF AWARENESS IN CITIZENS AGAINST CYBER THREATS

8. STATISTICS

9. OUR PRIVACY IS A MAJOR CHALLENGE WE ARE LIVING IN VIRTUAL WORLD WHERE OUR EACH AND EVERY ACTIVITY IS BEING MONITORED BY THE APPS WE USE. THINK TWICE BEFORE SHARING ANYTHING PUBLICLY& INSTALLING ANY APP.

10. CHINESE APPS BANNED MUCH APPRECIATIVE STEP TAKEN BY GOVERNMENT OF INDIA

11. A GOOD MOVE TO PROTECT OUR PRIVACY

12. IS IT SUFFICIENT TO PROTECT OUR PRIVACY & DATA? NO!

13. DATA PRIVACY MAXIMUM USES OF SMART PHONES AN ADVANTAGE TO COMPANIES

14. GAME & SOCIAL MEDIA ADDICTION IN CHILDREN & TEENS

15. PARENTAL GUIDANCE IS MUCH REQUIRED! • ATTENTION SEEKING SYNDROME IS DEVELOPING IN CHILDREN AND TEENS. • DESIRE TO BECOME A FAMOUS PERSON • RELATIONSHIP TREND. • CRAZE OF VERIFIED ACCOUNT (BLUE TICK BADGE)

16. DO NOT TRUST EVERYONE BLINDLY! • A BLUE TICK BADGE DOES NOT MEAN THE PERSON IS AUTHENTIC. • TERMS LIKE “CYBERCOP” “CYBEREXPERT” IS USERNAMES ARE BEING USED BY CYBER CRIMINALS. SHUBHAMCYBERCOP IS A PERFECT EXAMPLE. • DO NOT PAY MONEY FOR ACCOUNT VERIFICATION (BLUE TICK BADGE) TO ANYONE. • CROSS CHECK THE BACKGROUND OF ANY INDIVIDUAL BEFORE SHARING ANY EDIVENCE WITH THEM. DO NOT TRUST ON PROMOTIONAL NEWS ARTICLES. LOOK WHAT THEY HAVE DONE IN CYBER SECURITY DOMAIN.

17. DATA PRIVACY & SAFETY • OUR ALL ACTIVITIES ARE BEING MONITORED BY APPS • PRIVACY IS AT RISK • KIDS & WOMEN ARE BEING TARGETED • GAMES LIKE PUBG ARE MAKING CHILDREN & TEENS VOILENT AND AGGRESSIVE • SOME APPS ARE HIGHLY DANGEROUS LIKE “FACEAPP”

18. PERSONAL DATA PROTECTION BILL IS MUCH REQUIRED IN INDIA • IN 2017, MINISTRY OF IT & E HAD FORMED A COMMITTEE TO STUDY ISSUES RELATED TO DATA PROTECTION. • COMMITTEE WAS CHAIRMED BY RETD SUPREME COURT JUDGE JUSTICE B.N. SRIKRISHNA. • COMMITTEE SUBMITTED THE DRAFT PERSONAL DATA PROTECTION BILL IN JULY 2018. • GOVERNMENT OF INDIA SHOULD PASS THE PERSONAL DATA PROTECTION BILL OF INDIA AS SOON AS POSSIBLE.

19. NOW-A-DAYS, DUE TO COVID-19 PANDEMIC, EVERYONE IS DEPENDENT ON INTERNET. SCHOOLS, COLLEGES, OFFICES AND ALMOST EVERYTHING IS WORKING VIRTUALLY & THAT IS THE MAIN REASON BEHIND RAPID INCREASE IN CYBER CRIME DURING LOCKDOWN. • NOW CULPRITS ARE TAKING ADVANTAGE OF IT TO BULLY, HARASS, ABUSE, BLACKMAIL CITIZENS. WOMEN AND CHILDREN ARE EASY TARGETS BECAUSE THEY ARE “UNAWARE ABOUT THE SAFETY MEASURES & PROCEDURES OF REPORTING A CYBER CRIME”. • MASSIVE AWARENESS NEEDS TO BE CREATED AMONG WOMEN AND CHILDREN REGARDING THE SAFE USE OF MOBILE PHONES, COMPUTERS AND THE INTERNET.

20. MALICIOUS LINKS ON NAME OF COVID-19 DO NOT CLICK ANY UNKNOWN LINK WHICH IS CLAIMING OFFERS, DISCOUNTS, FREE GIFTS, COVID TESTS, JOB OFFERS OF WORK FROM HOME BECAUSE IT COULD BE A PHISHING PAGE OR MALICIOUS LINK OR A MALWARE OR A RANSOMWARE AND ONCE YOU CLICKED ANY MALICIOUS LINK, YOUR ACCOUNT CAN BE HACKED, YOUR FILES CAN BE ENCYPTED BY RANSOMWARES, SPYWARES COULD GET INSTALLED SILENTLY AND SO ON…

21. DIGITAL FOOTPRINTS EVERY CRIME CRIMINAL SHOULD REMEMBER THAT “DIGITAL FOOTPRINTS” REMAIN EVEN AFTER DESTROYING EVERYTHING. DELETED DATA OR ACCOUNTS CAN BE RETREIVED! ANONYMITY IS JUST AN ILLUSION!!

22. COMMON CYBER CRIMES INCREASING IN THIS PANDEMIC • CYBER BULLYING • PHOTO MORPHING • CYBER STALKING • PORNOGRAPHY • SCAMS SUCH AS CHEAP CERTIFICATIONS, JOB OFFERS, CHEAP PRODUCTS AVAILABLE ON OLX/SOCIAL MEDIA.

23. HOW TO REPORT A CYBER CRIME?

24. NATIONAL CYBER CRIME REPORTING PORTAL An initiative of Ministry of Home Affairs REPORT ANONYMOUSLY IF YOU DO NOT WANT TO KEEP YOUR IDENTITY SAFE THEN THERE IS AN OPTION TO REPORT YOUR COMPLAINT ANONYMOUSLY. REPORT WOMEN/CHILD RELATED CRIME WOMEN & CHILDREN CAN VISIT CYBERCRIME.GOV.IN & DIRECTLY FILE AN ONLINE COMPLAINT. 02 01 REPORT OTHER CYBER CRIME THIS OPTION IS GIVEN TO REPORT OTHER CYBER CRIMES SUCH AS BANKING FRAUDS, ACCOUNT HACKS ETC. 03

25. cybercrime.gov.in INTERCONNECTED WITH EVERY POLICE STATION ACROSS THE NATION MH UP DELHI MP HR TN RJ

26. HOW IT WORKS? cybercrime.gov.in portal Your complaint goes to your nearest Police Station/Cyber Crime Branch You file an online complaint at cybercrime.gov.in You receive a call from your Police Station & need to visit the station in person for the written statement STEP 1 STEP 2 STEP 3

27. KEEP ALL THE EVIDENCES SECURED • ALWAYS KEEP ALL THE SCREENSHOTS, MESSAGES, CALL RECORDINGS AND/OR ALL TYPE OF EVIDENCES SECURELY & ENCLOSE THEM WHILE FILLING THE COMPLAINT FORM. • NEVER EVER DELETE ANY EVIDENCE.

28. LOOPHOLES IN LAW ENFORCEMENT SO MANY FAKE CYBER EXPERTS ARE WAITING FOR YOU TO APPROACH THEM. THEY MISUSE YOUR EVIDENCES OR COULD MAKE YOU A VICTIM AGAIN. MOSTLY LOCAL POLICE STATIONS/CYBER CELLS TRY TO CONVENCE THE VICTIM NOT TO FILE THE CASE BY MISGUIDING AND CONFUSING THEM DISTRICT CYBER CELLS ARE INCAPABLE TO SOLVE CYBER CRIME CASES, ESPECIALLY IN RURAL AREAS. IT’S NOT NECESSARY THAT YOU GET RESPONSE AFTER FILING ONLINE COMPLAINT. 04 02 01 03

29. WHAT TO DO IF YOU DID NOT GET ANY RESPONSE? TWITTER SOMETIMES REALLY HELPS. DM OR TWEET BY MENTIONING YOUR AREA’S POLICE STATION/OFFICER. WE ALL HELP EVERYONE BY GUIDING THEM AND CONNECTING THEM TO GOVT LAW ENFORCEMENT AGENCIES. ALWAYS TRY TO STAY IN TOUCH WITH A CYBER SECURITY INDIVIDUALS. ]E-MAIL YOUR COMPLAINT TO THE POLICE STATION OR CALL THEM. 04 02 01 03

30. PRECAUTIONS

31. KNOW YOUR RIGHTS! LEARN SOME OF IT ACT 2000 • SECTION 67: DEALS WITH PUBLISHING OR TRANSMITTING OBSCENE MATERIAL IN ELECTRONIC FORM. AS PER ITAA 2008 IN WHICH CHILD PORNOGRAPHY WAS ALSO INCLUDED. • SECTION 66A:SENDING OFFENSIVE MESSAGES THROUGH COMMUNICATION SERVICE, CAUSING ANNOYANCE ETC THROUGH AN ELECTRONIC COMMUNICATION OR SENDING AN EMAIL TO MISLEAD OR DECEIVE THE RECIPIENT ABOUT THE ORIGIN OF SUCH MESSAGES (COMMONLY KNOWN AS IP OR EMAIL SPOOFING) ARE ALL COVERED HERE. PUNISHMENT FOR THESE ACTS IS IMPRISONMENT UP TO 3 YEARS OR FINE. • SECTION 66B: DISHONESTLY RECEIVING STOLEN COMPUTER RESOURCE OR COMMUNICATION DEVICE WITH PUNISHMENT UP TO 3 YEARS OR ONE LAKH RUPEES AS FINE OR BOTH • SECTION 66C: ELECTRONIC SIGNATURE OR OTHER IDENTITY THEFT LIKE USING OTHERS‟ PASSWORD OR ELECTRONIC SIGNATURE ETC. • SECTION66D: CHEATING BY PERSONATION USING COMPUTER RESOURCE OR A COMMUNICATION DEVICE SHALL BE PUNISHED WITH IMPRISONMENT OF EITHER DESCRIPTION FOR A TERM WHICH EXTEND TO THREE YEARS AND SHALL ALSO BE LIABLE TO FINE WHICH MAY EXTEND TO ONE LAKH RUPEE

32. KNOW YOUR RIGHTS! LEARN SOME OF IT ACT 2000 • SECTION66E: PRIVACY VIOLATION – PUBLISHING OR TRANSMITTING PRIVATE AREA OF ANY PERSON WITHOUT HIS OR HER CONSENT ETC. PUNISHMENT IS 3 YEARS IMPRISONMENT OR 2 LAKH RUPEES FINE OR BOTH. • SECTION66F: CYBER TERRORISM – INTENT TO THREATEN THE UNITY, INTEGRITY, SECURITY OR SOVEREIGNTY OF THE NATION AND DENYING ACCESS TO ANY PERSON AUTHORIZED TO ACCESS THE COMPUTER RESOURCE OR ATTEMPTING TO PENETRATE OR ACCESS A COMPUTER RESOURCE WITHOUT AUTHORIZATION. • SECTION 72: PUNISHMENT FOR BREACHING PRIVACY AND CONFIDENTIALITY. • SECTION 72A: PUNISHMENT FOR DISCLOSING INFORMATION DURING LAWFUL CONTRACT. • SECTION 354D: THIS SECTION DEALS WITH STALKING. IT DEFINES STALKER AS A MAN WHO FOLLOWS A WOMAN AND TRIES TO CONTACT SUCH WOMAN, MONITORS EVERY ACTIVITY UNDERTAKEN BY WOMEN WHILE USING DIGITAL MEDIA.

33. SOME SECURITYTIPS FOR WOMEN & TEENS TWO WAY AUTHENTICATION (2FA) ALWAYS ENABLE TWO WAY AUTHENTICATION FOR EVERY SOCIAL MEDIA APPS YOU USE. IT PROTECTS YOUR ACCOUNT FROM GETTING HACKED. INSTAGRAM MOST OF CYBER CRIMES AGAINST WOMEN & CHILDREN HAPPENS ON INSTAGRAM, THEREFORE ALWAYS KEEP YOUR INSTAGRAM ACCOUNT PRIVATE & ONLY ALLOWS THOSE FOLLOWING REQUESTS WHOM YOU KNOW PERSONALLY. FACEBOOK & OTHER SOCIAL MEDIA PLATFORMS DO NOT SHARE POSTS PUBLICLY. SHARE WITH FRIENDS ONLY. DO NOT ACCEPT FRIEND REQUESTS OF STRANGERS. DO NOT INSTALL & KEEP UNNECASSARY APPS AVOID INSTALLING APPS WHICH YOU DO NOT NEED SUCH AS COLLAGE MAKERS, PICTURE EDITING APPS. READ THE NEGATIVE REVIEWS ESPECIALLY BEFORE INSTALLING APPS. ALWAYS KEEP YOUR OS & APPS UPDATED

34. SOME SECURITY TIPS

35. QUESTIONS?

36. THANK YOU CONTACT ME FOR ANY QUERY +91 7705049191 Instagram: @initinpandey Facebook/Twitter: @initinpandey LinkedIn: @initinpandey1 -NITIN PANDEY CYBER SECURITY PROFESSIONAL CHAIRMAN OF NATIONAL INFORMATION SECURITY COUNCIL FOUNDER OF HACKERS DAY http://nitinpandey.tech nitinpandey@protonmail.com