InfoSecBulletin Cybersecurity for mankind
A sophisticated cyber fraud has stolen over ₹5.58 crore from many bank accounts, highlighting serious concerns about digital payment security. This scam involved cloning biometric data and affected 251 accounts in 17 districts. Authorities are working hard to contain the situation and catch those responsible.
The Modus Operandi: A Digital Heist
Major Danish university breached, 200,000 users at risk
Microsoft’s X account hijacked to promote Clippy crypto scam
Critical cPanel, GitLab AI Gateway and Dell CSM Flaws Enable RCE And Admin Hijacking
Nearly 100,000 email addresses exposed in first AI-related data breach in Singapore
Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws
Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws
CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
“InfoSecCon-2026: Bangladesh’s Cybersecurity Leaders Unite to Shape a Safer Digital Future”
Fraudsters exploited a crucial vulnerability in the Aadhaar payment system to clone biometric data and unlawfully access victims’ bank accounts. Most victims were rural residents dependent on local businesses for banking, whose fingerprints and personal information were stolen without their consent. The fraudulent transactions were carried out using business units linked to Fino Payments Bank Limited, which serves remote areas.
A Widespread Network of Deception
The fraud covers 17 districts in Bihar, India, with Araria as the main hub, losing over ₹3.05 crore from 140 accounts. Purnia and Kishanganj also faced significant losses of ₹99.87 lakh and ₹69.82 lakh, respectively. This widespread crime indicates a well-organized and skilled criminal network.
The Human Cost: A Community in Crisis
Most fraud victims come from marginalized communities, losing a significant portion of their savings. Many discovered their accounts empty after depositing their earnings, causing great distress. Complaints have been filed with the National Cyber Crime Reporting Portal (NCRCP), but only a small fraction of the money has been recovered, leaving many in despair.
Questions of Security and Accountability
The bank has reported a leak of confidential customer data, leading to an investigation by the Economic Offences Unit (EOU) of the Bihar Police. The bank is worried about the local police’s slow response and is keen to identify those responsible to prevent further misuse.
