Sunday , April 14 2024
sebacenter

“sebacenter.xyz”, a crucial identity threat for Bangladeshis

“sebacenter.xyz” is now a name of threat for personal identifiable information (PII) for the people of Bangladesh. By using only the site, miscreants are making and distributing fake paper of TIN, NID, NID info, BMET training, Surokkha, Death and birth register and duplicate land tax paper instantly. Even, if any NID number is entered, the detail of that person expose.

Source: CTTC

Counter terrorism and transitional crime (CTTC) of Dhaka metropolitan Police (DMP) seized the site and its four super admin and they are sent to prison but till now the site is active.

Hackers Manipulate GitHub Search to Deliver Malware to developer

Checkmarx researchers found that hackers are using GitHub search results to distribute long-lasting malware to developers' computers. The attackers in...
Read More
Hackers Manipulate GitHub Search to Deliver Malware to developer

Google Cloud and Palo Alto Networks joins for Cloud-Native NGFW Service

Google Cloud and Palo Alto Networks to announce the release of Google Cloud Next-Generation Firewall (NGFW) Enterprise. The managed firewall...
Read More
Google Cloud and Palo Alto Networks joins for Cloud-Native NGFW Service

ALERT
Bitdefender Critical Vulns Let Attackers Gain Control Over System

The Bitdefender GravityZone Update Server is vulnerable to server-side request forgery (SSRF) because of an incorrect regular expression. Bitdefender’s GravityZone:...
Read More
ALERT  Bitdefender Critical Vulns Let Attackers Gain Control Over System

ZERO DAY ALERT
Zero-Day Alert: Critical Palo Alto Networks PAN-OS Flaw Under Active Attack

A critical zero-day vulnerability in Palo Alto Networks' PAN-OS software. It is being used by attackers, but there are no...
Read More
ZERO DAY ALERT  Zero-Day Alert: Critical Palo Alto Networks PAN-OS Flaw Under Active Attack

CISA Opens Malware Analysis Tool For Public Use

CISA has launched a new initiative, making its advanced malware analysis system, Malware Next-Gen, available to the public. Malware Next-Gen...
Read More
CISA Opens Malware Analysis Tool For Public Use

PALO ALTO NETWORKS FIXED MULTIPLE DOS BUGS

Palo Alto Networks released security updates to high severity vulnerabilities in its PAN-OS operating system. The company fixed the following...
Read More
PALO ALTO NETWORKS FIXED MULTIPLE DOS BUGS

CISA immediately orders agencies to mitigate risk impacted by Microsoft hack

CISA has ordered U.S. federal agencies to address risks from the breach of multiple Microsoft email accounts by the Russian...
Read More
CISA immediately orders agencies to mitigate risk impacted by Microsoft hack

ESET RESEARCH
“eXotic” spyware espionage campaign targets India and Pakistan

ESET researchers found a spying campaign targeting Android users. The campaign uses fake messaging apps that include XploitSPY malware. The...
Read More
ESET RESEARCH  “eXotic” spyware espionage campaign targets India and Pakistan

CISA Releases Nine Industrial Control Systems Advisories

CISA issued nine advisories about Industrial Control Systems (ICS) on April 11, 2024. These advisories give important information about security...
Read More
CISA Releases Nine Industrial Control Systems Advisories

Apple alerts 92 nations to mercenary spyware attacks

Apple warned users in 91 other countries about a possible "mercenary spyware attack". Apple notified Reuters that the company found...
Read More
Apple alerts 92 nations to mercenary spyware attacks

Imranul Islam, assistant commissioner of CTTC’s Cyber Crime Investigation Department, stated that most customers who used the fraudulent land tax services had not paid their taxes for 30 to 40 years, and used this scheme to evade tax.

He said the illegal business profits were shared equally among the super admins, while users or agents received commissions. Investigators found 360 fake land development tax payment receipts in one of the accounts.

He said, While in the remand of the fraudsters, CTTC got some crucial information of the racket. “Through an API the miscreants collect the information, its dangerous” stated he. We are working on the issue with utmost care.

Deputy Commissioner AFM Al Kibria of the Cyber Crime Investigation Department of CTTC revealed that the arrested individuals acquired the NID information from a government website. He emphasized the need for service providers to be more cautious when handling such sensitive information in order to prevent loopholes for fraudsters. Additionally, institutions should conduct regular IT audits, Vulnerability Assessment and Penetration Testing (VAPT), and system monitoring. On the other hand, people should also be cautious and avoid free services or offers, instead choosing legitimate service providers and websites.

Experts said, by using API the fraudsters collect the information. So, the proper authority must take stern action to identify which API is being used to do that and bring them under trial.

Various local media report about 176 organizations have access to the NID server while as of October 2023, the country’s NID server had information of about 12 crore voters, of whom around 5.5 crore have smart NID cards.

 

 

Check Also

CoralRaider

Cisco Talos report
“CoralRaider” Targeting Financial Data Across Asia including Bangladesh

Vietnamese hackers are targeting businesses in Asia to get corporate credentials and financial data to …

Leave a Reply

Your email address will not be published. Required fields are marked *