InfoSecBulletin Cybersecurity for mankind
A sophisticated cyber fraud has stolen over ₹5.58 crore from many bank accounts, highlighting serious concerns about digital payment security. This scam involved cloning biometric data and affected 251 accounts in 17 districts. Authorities are working hard to contain the situation and catch those responsible.
The Modus Operandi: A Digital Heist
Mysterious AI model “Ox Alpha” with free 100 trillion tokens a day for coders
After BDJobs, Directorate of Secondary and Higher Education 390k data surfaced online
Researchers show new technique to bypass AI safety guardrails in Grok and Gemini
About thousands of leaked AWS keys Held Full Admin Rights
US Bank investigates LockBit’s Data Breach Claims
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Critical Zimbra RCE Flaw Actively Exploited in the Wild
Fraudsters exploited a crucial vulnerability in the Aadhaar payment system to clone biometric data and unlawfully access victims’ bank accounts. Most victims were rural residents dependent on local businesses for banking, whose fingerprints and personal information were stolen without their consent. The fraudulent transactions were carried out using business units linked to Fino Payments Bank Limited, which serves remote areas.
A Widespread Network of Deception
The fraud covers 17 districts in Bihar, India, with Araria as the main hub, losing over ₹3.05 crore from 140 accounts. Purnia and Kishanganj also faced significant losses of ₹99.87 lakh and ₹69.82 lakh, respectively. This widespread crime indicates a well-organized and skilled criminal network.
The Human Cost: A Community in Crisis
Most fraud victims come from marginalized communities, losing a significant portion of their savings. Many discovered their accounts empty after depositing their earnings, causing great distress. Complaints have been filed with the National Cyber Crime Reporting Portal (NCRCP), but only a small fraction of the money has been recovered, leaving many in despair.
Questions of Security and Accountability
The bank has reported a leak of confidential customer data, leading to an investigation by the Economic Offences Unit (EOU) of the Bihar Police. The bank is worried about the local police’s slow response and is keen to identify those responsible to prevent further misuse.
