InfoSecBulletin Cybersecurity for mankind
Indian government websites have been used by scammers to place ads that send visitors to online betting sites. TechCrunch found about 50 “gov.in” website links from Indian states like Bihar, Goa, Karnataka, Kerala, Mizoram, and Telangana that were sending visitors to online betting sites.
Some of these websites belong to state police and property tax departments. The links were on search engines like Google, making the ads easy to find online.
SonicWall patched SSLVPN Vuln Allowing Firewall Crashing
GitLab Releases Security Update For Multiple Vulns
ISPAB president “whatsapp” got hacked via phishing link
Zyxel released patches 2 vulns in its USG FLEX H series firewalls
South Korea’s largest SK Telecom Hit by Malware: SIM-related info leaked
ChatGPT Develops Exploit for CVEs Before Public PoCs Share
TP-Link Router Vulns Allow to Execute Malicious SQL Commands
SSL.com’s domain validation system’s bug found: Hacker exploited
Amazon Follows Microsoft’s Lead, Halts Some Data Center Deals
Hackers Exploit Zoom’s Remote Control Feature for System Access
The websites redirect users to an online betting platform that is claimed to be the most popular in Asia and the number one cricket betting app in India. They allow users to bet on games, including cricket tournaments like the Indian Premier League.
It’s not clear how the scammers planted the ads on Indian government pages or for how long the links were redirecting to the online betting platforms.
Scammers hacked several websites in Goa, including the Goa Teacher’s Eligibility Test (GTET) website, the Infotech Corporation of Goa’s recruitment application website, and the SC/ST free laptop scheme website, to put online betting ads and redirection links reported by “heraldgoa.in”
According to newsbytesapp, there’s a scam involving online betting ads on Indian government websites, redirecting visitors to betting platforms.
TechCrunch alerted India’s Computer Emergency Response Team of the matter. The Indian cyber agency acknowledged the receipt of the email, and on Thursday CERT-In confirmed it escalated the matter.
“We have taken up with the concerned authority for appropriate action,” the agency said in an email response. It is not clear if the flaw allowing the backdoor access to state government websites has been fixed tech crunch report read.
(Media Disclaimer: This report is based on research conducted internally and externally using different ways. The information provided is for reference only, and users are responsible for relying on it. Infosecbulletin is not liable for the accuracy or consequences of using this information by any means)
