InfoSecBulletin Cybersecurity for mankind
Indian government websites have been used by scammers to place ads that send visitors to online betting sites. TechCrunch found about 50 “gov.in” website links from Indian states like Bihar, Goa, Karnataka, Kerala, Mizoram, and Telangana that were sending visitors to online betting sites.
Some of these websites belong to state police and property tax departments. The links were on search engines like Google, making the ads easy to find online.
CVSS 9.6: IBM QRadar & Cloud Pak Security Flaws Exposed
ALERT
Thousands of IP addresses compromised nationwide: CIRT warn
New Android Malware ‘Crocodilus’ Targets Banks in 8 Countries
Qualcomm Patches 3 Zero-Days Used in Targeted Android Attacks
Critical RCE Flaw Patched in Roundcube Webmail
Hacker claim Leak of Deloitte Source Code & GitHub Credentials
CISA Issued Guidance for SIEM and SOAR Implementation
Linux flaws enable password hash theft via core dumps in Ubuntu, RHEL, Fedora
Australia enacts mandatory ransomware payment reporting
Why Govt Demands Foreign CCTV Firms to Submit Source Code?
The websites redirect users to an online betting platform that is claimed to be the most popular in Asia and the number one cricket betting app in India. They allow users to bet on games, including cricket tournaments like the Indian Premier League.
It’s not clear how the scammers planted the ads on Indian government pages or for how long the links were redirecting to the online betting platforms.
Scammers hacked several websites in Goa, including the Goa Teacher’s Eligibility Test (GTET) website, the Infotech Corporation of Goa’s recruitment application website, and the SC/ST free laptop scheme website, to put online betting ads and redirection links reported by “heraldgoa.in”
According to newsbytesapp, there’s a scam involving online betting ads on Indian government websites, redirecting visitors to betting platforms.
TechCrunch alerted India’s Computer Emergency Response Team of the matter. The Indian cyber agency acknowledged the receipt of the email, and on Thursday CERT-In confirmed it escalated the matter.
“We have taken up with the concerned authority for appropriate action,” the agency said in an email response. It is not clear if the flaw allowing the backdoor access to state government websites has been fixed tech crunch report read.
(Media Disclaimer: This report is based on research conducted internally and externally using different ways. The information provided is for reference only, and users are responsible for relying on it. Infosecbulletin is not liable for the accuracy or consequences of using this information by any means)
