Anecdote: a cyber scam at Bengaluru airport highlighted the misuse of social engineering and malicious APKs (Android Package files) to defraud unsuspecting users.
About Social Engineering:
- Definition: Manipulating individuals into revealing confidential information or granting access to systems by exploiting trust.
- Techniques used:
- Fake websites: Creating replicas of trusted platforms (e.g., Loungepass.in in this case).
- Pretexting: Posing as customer service representatives to gain credibility.
- Phishing links: Sending links to malicious APKs via communication platforms like WhatsApp.
- Call forwarding manipulation: Using network codes to intercept OTPs.
- Impact:
- Financial theft through unauthorized transactions.
- Access to personal information like messages, photos, and sensitive data.
- Loss of control over phone calls and outgoing communication.
Relevance to UPSC Syllabus
- General Studies Paper II (Governance):
- Digital literacy and cybercrime regulation in India.
- Policies for safe use of technology.
- General Studies Paper III (Security):
- Challenges in cybersecurity.
- Techniques of cybercrimes and preventive measures.
- Ethics Paper IV:
- Ethical challenges in technology use.
- Personal responsibility in digital safety.
