<ul><li>SBI has issued a warning to its customers to beware of an impending phishing attack. </li><li>CERT-In, India’s nodal cybersecurity agency, issued an advisory after cybercriminals threatened to unleash an attack on major cities like Delhi, Mumbai, Hyderabad, Chennai and Ahmedabad. </li><li>The hackers claim to have over 2 million email IDs in their possession. </li></ul>The <keyword id="6354731" type="UNKNOWN" weightage="20" keywordseo="state-bank-of-india">State Bank of India</keyword> (SBI) has issued a warning for its users to beware of an imminent phishing attack. Be on the lookout for any emails from ‘ncov2019@gov.in’ with the subject like ‘Free COVID-19 Testing’. <div type="twitter" handle="TheOfficialSBI" handlename="State Bank of India" image="http://pbs.twimg.com/profile_images/874974596931371008/R5OJdnqW_normal.jpg" favoritecount="529" retweetcount="255" status="Attention! It has come to our notice that a cyber attack is going to take place in major cities of India. Kindly re… https://t.co/0AlzEw8QwF" createdat="1592745315000" id="1274692359469428737"></div> According to the warning issued by the Computer Emergency Response Team - India (CERT-In) — India’s nodal cybersecurity agency — the attack will target users in major cities across the country primarily in Delhi, Mumbai, Hyderabad, Chennai and Ahmedabad. The attackers reportedly have over 2 million email IDs in their kitty. <div type="twitter" handle="IndianCERT" handlename="CERT-In" image="http://pbs.twimg.com/profile_images/737278813126545408/gRf5_7yO_normal.jpg" favoritecount="496" retweetcount="437" status="CERT-In issued advisory on COVID 19-related Phishing Attack Campaign by Malicious Actors. https://t.co/x8WO3TseCM" createdat="1592674717000" id="1274396249517522945"></div> The advisory warned that cybercriminals are expected to send phishing emails to these IDs in the guise of local authorities who are in charge of dispensing government-funded COVID-19 support initiatives. This could be anything from donations to the PM-CARES Fund to EPF contributions. “Such emails are designed to drive recipients towards fake websites where they are deceived into downloading malicious files or entering personal and financial information,” said CERT-In in its notice. Exploitation in the name of the coronavirus Last month, Microsoft also warned its users to beware of another coronavirus themed malware distribution campaign claiming to be from Johns Hopkins University. Emails were being sent out with booby-trapped spreadsheets with headlines like ‘horrible charts’. Opening the file will show you a legitimate chart, but it also installs a Remote Access Trojan (RAT) that allows hackers to control your computer remotely. <div type="image" title="microsoftphishing_edited" msid="76505484" hostid="261" caption="&amp;lt;p&amp;gt;Horrible charts attachment in phishing emails &amp;lt;/p&amp;gt;"></div> In May, Seqrite — a cybersecurity company — discovered another RAT attacking cooperative banks in India. Under the guise of being from the Reserve Bank of India or a nationalised bank, attackers were sending out emails that looked innocent enough, referring to COVID-19 guidelines or a financial transaction with a .zip attachment. The attachment included a JAR-based malware that would allow bad actors to take your device from a remote location. How to protect yourself from phishing scams In the wake of the coronavirus pandemic, more people working from home — and hackers are more active than ever preying on unsecured networks. “Cybercriminals are exploiting the coronavirus outbreak to send fake emails with dangerous links to employees,” said Norton, a cybersecurity company. As risk escalates, it’s important to maintain a healthy suspicion for emails from email IDs you haven’t seen before, especially if its with respect to any coronavirus news. “Even if they promise news you are interested in, any information in the attachment will almost certainly be available from a more direct source, via a link of your own choosing,” said Paul Ducklin the principal research scientist at Sophos. As a precautionary measure, one should have a malware detection tool or anti-virus installed to alert them in case something slips through the crack. At the minimum, all devices should be fully updated with the latest security patches. SEE ALSO: <a href="https://www.businessinsider.in/tech/news/cognizants-ransomware-attack-is-making-peers-like-tcs-and-infosys-nervous-and-they-are-beefing-up-security/articleshow/75271532.cms">Cognizant's ransomware attack is making peers like TCS and Infosys nervous — and they are beefing up security</a> <a href="https://www.businessinsider.in/top-cryptocurrency-scams-of-2019-and-how-most-hackers-got-away-with-it/articleshow/70670383.cms">Top cryptocurrency scams of 2019 — and how most hackers got away with it</a> <a href="https://www.businessinsider.in/tech/enterprise/news/dont-buy-new-laptops-invest-in-virtual-machines-to-protect-against-cyberattacks-suggests-cybersecurity-expert/articleshow/76274816.cms">Don’t buy new laptops, invest in virtual machines to protect against cyberattacks — suggests cybersecurity expert</a>

SBI warns 2 million users may be at risk of phishing attacks in Delhi, Mumbai and other major cities

Nearly eight in 10 <keyword id="6358610" type="UNKNOWN" weightage="20" keywordseo="businesses">businesses</keyword> globally feel that the pandemic has increased the likelihood of a state-led or <keyword id="10807750" type="UNKNOWN" weightage="20" keywordseo="-sponsored-cyberattack">-sponsored cyberattack</keyword> on their <keyword id="48809" type="ORGANIZATION" weightage="20" keywordseo="Organisation">organisation</keyword>, revealed a new survey by the <keyword id="110503" type="COMPANY" weightage="20" keywordseo="Economist-Intelligence-Unit">Economist Intelligence Unit</keyword> (EIU) and the Cybersecurity Tech Accord on Monday. The businesses call for greater international political cooperation to mitigate these state-sponsored <keyword id="6377004" type="UNKNOWN" weightage="20" keywordseo="threats">threats</keyword>. The survey was conducted between November and December 2020, before the pernicious cyberattack on software company SolarWinds came to light that affected over nine federal agencies and 100 organisations, according to the White House. "That attack was a moment of reckoning for many organisations about the challenges posed by state-led and -sponsored cyberattacks but, as the survey reveals, many businesses have long been aware of the escalating threat," the research said. "As a coalition of over 150 global technology companies, we are greatly concerned by state-sponsored cyberattacks, which are becoming ever more frequent and sophisticated. Something needs to be done and soon," said Annalaura Gallo, secretariat of Cybersecurity Tech Accord. "This survey shows that businesses see state-led and -sponsored cyberattacks as a pressing issue that demands governments act nationally and internationally." Companies expect cyber threats from nation-state actors to increase in the next five years and will be second only to that of organised crime. "There is a false sense of security. Sixty-eight per cent of executives feel their organisations are 'very' or 'completely' prepared to deal with a cyberattack," the report mentioned. The survey targeted over 500 director-level or above executives from businesses in Asia-Pacific, Europe, and the US, familiar with their organisation's cybersecurity strategy. According to Charles Carmakal, senior vice president and CTO at FireEye, most organisations don't have tangible experience dealing with such threats because they are rarely the primary targets of these attacks. "The recent SolarWinds hack may compel more organisations to think about how they mitigate risk," he said. Although cyberattacks are a silent threat, they can have devastating and long-lasting effects on our society. "Given the recent escalation of tensions in cyberspace, cooperation between governments is becoming increasingly complicated as political systems differ and technological competition rises," said Marietje Schaake, President of the CyberPeace Institute. SEE ALSO: <a href="https://www.businessinsider.in/careers/news/deutsche-bank-plans-to-hire-1000-freshers-in-india-as-it-looks-to-build-core-technologies-in-house/articleshow/81147886.cms">INTERVIEW: Deutsche Bank plans to hire 1,000 freshers in India as it looks to build core technologies in-house</a> <a href="https://www.businessinsider.in/finance/banks/news/analysts-reports-showed-that-90-percent-of-unsecured-retail-loans-have-gone-to-salaried-government-employees/articleshow/81150110.cms">One in every five rupees lent by SBI to individuals, goes to government employees</a> <a href="https://www.businessinsider.in/science/space/news/nasa-finds-black-mold-fungus-can-survive-on-mars/articleshow/81152258.cms">NASA finds black mold fungus can survive on Mars — and it poses a threat to astronauts</a>

State sponsored cyber threats are a major concern for 80% of businesses around the world

<keyword id="6358777" type="LOCATION" weightage="20" keywordseo="New-Delhi">New Delhi</keyword>, The growing <keyword id="10390824" type="UNKNOWN" weightage="20" keywordseo="cybercrime-incidents">cybercrime incidents</keyword> now cost the world economy more than $1 trillion, or just more than one per cent of global GDP, which is up more than 50 per cent from a 2018 report that put global losses at close to $600 billion, leading cyber security firm McAfee revealed on Monday. Two-thirds of surveyed companies reported some kind of <keyword id="4844527" type="PERSON" weightage="20" keywordseo="cyber-incident">cyber incident</keyword> in 2019 and the <keyword id="3262141" type="PERSON" weightage="20" keywordseo="average-cost">average cost</keyword> was more than half a million dollars per incident. IP theft and financial crime account for at least 75 per cent of cyber losses and pose the greatest threat to companies, according to the report conducted in partnership with the Center for Strategic and International Studies (CSIS). The report. titled 'The Hidden Costs of <keyword id="6375096" type="UNKNOWN" weightage="20" keywordseo="cybercrime">Cybercrime</keyword>,' also explored the damage reported beyond financial losses, revealing that 92 percent of businesses felt there were other negative effects on their business beyond financial costs and lost work hours after a cyber incident. "The severity and frequency of cyber attacks on businesses continues to rise as techniques evolve, new technologies broaden the threat surface, and the nature of work expands into home and remote environments," said Steve Grobman, SVP and CTO at McAfee. "We need a greater understanding of the comprehensive impact of cyber risk and effective plans in place to respond and prevent cyber incidents given the 100s of billions of dollars of global financial impact." Damage to companies also includes downtime, brand reputation and reduced efficiency and 56 per cent of surveyed organisations said they do not have a plan to both prevent and respond to a cyber-incident. Out of the 951 organisations that actually had a response plan, only 32 per cent said the plan was effective. The system downtime was a common experience for around two thirds of respondents' organisations. The average cost to organisations from their longest amount of downtime in 2019 was $762,231, said the report based on interviews with 1,500 IT and business decision makers online. Thirty-three per cent of survey respondents stated that IT security incident resulting in system downtime cost them between $100,000 and $500,000. "As a result of system downtime, organisations lost, on average, nine working hours a week leading to reduced efficiency. The average interruption to operations was 18 hours". According to the report, it took an average of 19 hours for most organisations to move from the discovery of an incident to remediation. Nearly 26 per cent of the respondents identified damage to brand from the downtime experienced because of a <keyword id="1159547" type="PERSON" weightage="20" keywordseo="cyber-attack">cyber-attack</keyword>, the McAfee report mentioned. SEE ALSO: <a href="https://www.businessinsider.in/stock-market/news/top-stocks-to-watch-ril-maruti-suzuki-nmdc-sbi-ongc-eicher-motors-likhitha-infrastructure-tata-consumer-and-others/articleshow/79600409.cms">Top stocks to watch — RIL, Maruti Suzuki, NMDC, SBI, ONGC, Eicher Motors, Likhitha Infrastructure, Tata Consumer, and others</a> <a href="https://www.businessinsider.in/india/news/petrol-is-less-than-a-rupee-away-from-being-more-expensive-than-it-has-ever-been-for-indian-consumers/articleshow/79601841.cms">Petrol is less than a rupee away from being more expensive than it has ever been for Indian consumers</a>

The global economy lost $1 trillion to hackers, with McAfee pegging the average cost of cybercrime at $500,000

<ul><li>The Indian government has warned that over 2 million users may be targeted for phishing attacks.</li><li>Attackers are expected to use the Covid-19 pandemic to target users. </li></ul>The government has issued an advisory that ‘malicious actors’ are planning to attack over 2 million individuals as part of a large-scale <keyword id="6380860" type="UNKNOWN" weightage="20" keywordseo="phishing-attack">phishing attack</keyword> against Indian individuals and businesses. This comes at a time when India is embroiled in a border dispute with China. The advisory has been issued by Indian Computer Emergency Response Team (CERT-In), which is India’s nodal cybersecurity agency. "The phishing campaign is expected to use malicious emails under the pretext of local authorities in charge of dispensing government-funded Covid-19 support initiatives. Such emails are designed to drive recipients towards fake websites where they are deceived into downloading malicious files or entering personal and financial information.” said CERT-In a <a href="https://twitter.com/IndianCERT/status/1274396249517522945/photo/1">statement</a>. What is phishing? Phishing is a type of attack that is aimed at collecting usernames, passwords and other personal information of users. It is usually in the form of an email or a message that contains a link or an attachment, pretending to be a trustworthy entity such as a company or a bank. As per an <a href="https://www.akamai.com/us/en/multimedia/documents/state-of-the-internet/soti-security-phishing-baiting-the-hook-report-2019.pdf">Akamai report</a>, phishing plays a role in 32% of all breaches and 78% of all cyber-attacks. Examples of phishing attacks Ayushman Bharat phishing attack <div type="image" title="Ayushman Bharat phishing attack" msid="76546007" hostid="261" caption="&amp;lt;p&amp;gt;An example of Ayushman Bharat phishing attack.&amp;lt;/p&amp;gt;"></div> The Ayushman Bharat phishing attack uses the Indian government’s free health coverage scheme to deceive users. In this, a message is shared with the message that ‘10-crore people between the age of 13 -70 years are being provided with free insurance worth ₹5,00,000 to cover the Covid-19 pandemic.’ It asks users to register themselves using the given link. However, this link is designed only to obtain the user’s personal information. Instagram phishing attack <div type="image" title="Instagram phishing attack" msid="76545949" hostid="261" caption="&amp;lt;p&amp;gt;An example of Instagram phishing attack.&amp;lt;/p&amp;gt;"></div> A popular Instagram phishing attack disguises itself as a two-factor authentication email. Along with the verification code, the email also includes a link using which users can sign into their account. If the user clicks on the link and enters their account details, they are recorded by the attacker. Netflix phishing attack <div type="image" title="Netflix Phishing attack" msid="76545964" hostid="261" caption="&amp;lt;p&amp;gt;An example of Netflix phishing attack.&amp;lt;/p&amp;gt;"></div> Another popular phishing attack is the Netflix account on-hold trick. In this, an email is sent to users, supposedly from Netflix claiming that the company is having trouble accessing the user’s ‘current billing information’. A link is included asking users to update their account information. This is used to obtain the user’s payment information. How to protect yourself from phishing attacks? Here are some tips that will help you protect yourself from phishing attacks: <ul><li>Do not click on any email that you receive from ‘ncov2019@gov.in’ or similar email addresses.’ </li><li>Do not open any email with ‘Free Covid-19 testing’ or similar subjects. </li><li>Organizations have their own domain and do not use public domains to send emails to their customers. If you receive a email from a company with a public domain (@gmail.com at the end), avoid clicking on any links or attachments. </li><li>Check the email or message for spelling mistakes, unusual phrases and discrepancies in the domain name. </li><li>Check the integrity of the URL before clicking on the link or providing login credentials. </li><li>If the email contains unnecessary attachments or links, avoid clicking on them. </li><li>Avoid clicking on shortened links, especially on social media. </li><li>Avoid emails from suspicious senders that contain urgent deadlines and ask you to click on a link or visit a website urgently. </li><li>Do not enter personal information in pop-up screens. Companies generally do not use pop-up screens to ask for user information. </li></ul>SEE ALSO: <a href="https://www.businessinsider.in/tech/news/sbi-warns-2-million-users-may-be-at-risk-of-phishing-attacks-in-delhi-mumbai-and-other-major-cities/articleshow/76505433.cms">SBI warns 2 million users may be at risk of phishing attacks in Delhi, Mumbai and other major cities</a> <a href="https://www.businessinsider.in/tech/news/cognizants-ransomware-attack-is-making-peers-like-tcs-and-infosys-nervous-and-they-are-beefing-up-security/articleshow/75271532.cms">Cognizant's ransomware attack is making peers like TCS and Infosys nervous — and they are beefing up security</a>

You Searched For "sbi cyberattack" and got 4 results

SBI warns 2 million users may be at risk of phishing attacks in Delhi, Mumbai and other major cities

Prabhjote Gill

State sponsored cyber threats are a major concern for 80% of businesses around the world

IANS

The global economy lost $1 trillion to hackers, with McAfee pegging the average cost of cybercrime at $500,000

IANS

What is phishing attack and what are the examples of phishing attacks

Rounak Jain