Hacking & Digital Arrest Scams – Cyber Crimes Decoded

1.

What is cybercrime?

• In general cybercrime may be defined as “Any unlawful act where a computer or communication device or computer network is used to commit or facilitate the commission of crime”.
• These crimes involve the use of technology to commit fraud, identity theft, data breaches, computer viruses, scams, and expanded upon in other malicious acts.
• Cybercrime is a serious issue in India, and the Information Technology Act (IT Act) of 2000 covers many types of cybercrimes.

2.

What is the history of cybercrime?

• The history of cybercrime can be traced back centuries, with the first recorded cyber attack in 1834 in France.

3.

What is the UN cybercrime treaty?

• The UN Convention against Cybercrime aims to prevent and combat cybercrime more efficiently and effectively, including by strengthening international cooperation and by providing technical assistance and capacity-building support, particularly for developing countries.
• The adoption of this landmark convention is a major victory for multilateralism, marking the first binding international anti-crime treaty in 20 years.
• The UN Office on Drugs and Crime (UNODC) served as secretariat to the negotiations.
• The General Assembly adopted the resolution without a vote.
• The Convention will open for signature at a formal ceremony to be hosted by VietNam in 2025 and will enter into force 90 days after being ratified by the 40th signatory.

4.

Enlist various types of cybercrimes?

Types of cybercrimes	Analysis
Child Pornography/ Child sexually abusive material (CSAM)	Child sexually abusive material (CSAM) refers to material containing sexual images in any form, of a child who is abused or sexually exploited. Section 67 (B) of IT Act states that “it is punishable for publishing or transmitting material depicting children in sexually explicit acts, etc. in electronic form.
Cyber Bullying	Cyber Bullying is a form of harassment or bullying inflicted through the use of electronic or communication devices such as computers, mobile phones, laptops, etc.
Cyber stalking	Cyber stalking is the use of electronic communication by a person to follow a person, or attempts to contact a person to foster personal interaction repeatedly despite a clear indication of disinterest by such person or monitoring the internet, email or any other form of electronic communication commits the offence of stalking.
Online Job Fraud	Online Job Fraud is an attempt to defraud people who are in need of employment by giving them a false hope/ promise of better employment with higher wages.
Online Sextortion	Online Sextortion occurs when someone threatens to distribute private and sensitive material using an electronic medium if he/ she doesn’t provide images of a sexual nature, sexual favours, or money.
SIM Swap Scam	SIM Swap Scam occurs when fraudsters manage to get a new SIM card issued against a registered mobile number fraudulently through the mobile service provider. With the help of this new SIM card, they get One Time Password (OTP) and alerts, required for making financial transactions through the victim's bank account. Getting a new SIM card against a registered mobile number fraudulently is known as SIM Swap.
Phishing	Phishing is a type of fraud that involves stealing personal information such as Customer ID, IPIN, Credit/Debit Card number, Card expiry date, CVV number, etc. through emails that appear to be from a legitimate source.
Denial Of Services /Distributed DoS	Denial of Services (DoS) attack is an attack intended for denying access to computer resources without permission of the owner or any other person who is in-charge of a computer, computer system or computer network. A Distributed Denial of Service (DDoS) attack is an attempt to make an online service unavailable by overwhelming it with traffic from multiple sources.
Spamming	Spamming occurs when someone receives unsolicited commercial messages sent via email, SMS, MMS and any other similar electronic messaging media. They may try to persuade the recipient to buy a product or service, or visit a website where he can make purchases or they may attempt to trick him/ her into divulging bank account or credit card details.
Espionage	Espionage is the act or practice of obtaining data and information without the permission and knowledge of the owner.
Cryptojacking	Cryptojacking is the unauthorized use of computing resources to mine cryptocurrencies.

5.

Enlist a range of cybercrimes against the government?

Cybercrime	Analysis
Cyber Terrorism	Cyber Terrorism is a major burning issue in the domestic as well as global concern. The common form of these terrorist attacks on the internet is by distributed denial of service attacks, hate websites and hate emails, attacks on sensitive computer networks etc. Cyber terrorism activities endanger the sovereignty and integrity of the nation.
Cyber Warfare	It refers to politically motivated hacking to conduct sabotage and espionage. It is a form of information warfare sometimes seen as analogous to conventional warfare although this analogy is controversial for both its accuracy and its political motivation.
Distribution of pirated software	Distribution of pirated software means distributing pirated software from one computer to another intending to destroy the data and official records of the government.
Possession of Unauthorized Information	It is very easy to access any information by the terrorists with the aid of the internet and to possess that information for political, religious, social, ideological objectives.

6.

What is Hacking and enlist its types?

• Hacking in cyber security refers to the misuse of devices like computers, smartphones, tablets, and networks to cause damage to or corrupt systems, gather information on users, steal data and documents, or disrupt data-related activity
• Hacking first appeared as a term in the 1970s but became more popular through the next decade.
• Hacking can be of following types:

Types of Hacking	Description
Black hat hackers	Black hat hackers are the "bad guys" of the hacking scene. They go out of their way to discover vulnerabilities in computer systems and software to exploit them for financial gain or for more malicious purposes, such as to gain reputation, carry out corporate espionage, or as part of a nation-state hacking campaign.
White hat hackers	White hat hackers can be seen as the “good guys” who attempt to prevent the success of black hat hackers through proactive hacking. They use their technical skills to break into systems to assess and test the level of network security, also known as ethical hacking. This helps expose vulnerabilities in systems before black hat hackers can detect and exploit them. The techniques white hat hackers use are similar to or even identical to those of black hat hackers, but these individuals are hired by organizations to test and discover potential holes in their security defenses.
Grey hat hackers	Grey hat hackers sit somewhere between the good and the bad guys. Unlike black hat hackers, they attempt to violate standards and principles but without intending to do harm or gain financially. Their actions are typically carried out for the common good. For example, they may exploit a vulnerability to raise awareness that it exists, but unlike white hat hackers, they do so publicly. This alerts malicious actors to the existence of the vulnerability.

7.

What is malware and mention its types?

• Malware is malicious software that a cybercriminal/hacker creates to disrupt/damage computer/s or derive financial benefits.
• It is often spread by way of an unsolicited email attachment or download link.
• They can be of following types:

Types of Malware	Analysis
Virus	It is a self-replicating program that attaches to a clean file and spreads in a computer system infecting other files.
Trojans	Trojans disguises as legitimate software and users are tricked into uploading Trojans onto their devices where they cause damage or collect data.
Spyware	Spyware is a program that secretly records what a user does, and then this information is misused.
Ransomware	Ransomware locks down a user‟s files/data, the user can not access them unless a ransom is paid. Example - Wannacry and Petya.
Adware	Adware is advertising software that can be used to spread malware.
Logic Bombs	A logic bomb is a malicious program that uses a trigger to activate the malicious code. The logic bomb remains non-functioning until that trigger event happens. Once triggered, a logic bomb implements a malicious code that causes harm to a computer. Cybersecurity specialists recently discovered logic bombs that attack and destroy the hardware components in a workstation or server including the cooling fans, hard drives, and power supplies. The logic bomb overdrives these devices until they overheat or fail.
Keyloggers	Keylogger records everything the user types on his/her computer system to obtain passwords and other sensitive information and send them to the source of the keylogging program.
Backdoors	A backdoor bypasses the usual authentication used to access a system. The purpose of the backdoor is to grant cyber criminals future access to the system even if the organization fixes the original vulnerability used to attack the system.

8.

Enlist data on global cyberattacks?

9.

What is Digital Arrest?

• Digital Arrest is a new and innovative tactic employed by cybercriminals to defraud gullible victims and extort money.

10.

What is the status of cybercrime in India?

• India was placed on the 80th position in a report focusing on local threats in the year 2023.
• The position is based on the malicious programmes found directly on users‟ computers or removable media connected to them (flash drives, camera memory cards, phones, external hard drives) or that initially made their way onto the computer in non-open form, including programmes in complex installers or encrypted files.
• Additionally, nearly 34% of users in India were targeted by local threats, amounting to some 74,385,324 local incidents being blocked by Kasperksy products.

11.

Enlist the findings of the India Cyber Threat Report 2023?

• The India cyber threat report 2023 is released by the Data Security Council of India (DSCI) and Quick heal.

12.

What are the reasons for rising cyber crimes in India?

• The rise of cybercrime in India is a complex issue, with several key factors contributing to its growth and impact.
• Here are the few important reasons for the rise of cybercrime in India.

Reasons	Analysis
Increasing Internet Penetration	India has witnessed a remarkable surge in Internet penetration, driven by the availability of affordable smartphones and low-cost data plans. While this digital revolution has brought numerous benefits, it has expanded the potential target pool for cybercriminals.
Rapid Digital Transformation	Various sectors in India, including banking, ecommerce, healthcare, and government services, have undergone rapid digital transformation. Adopting online platforms and digital systems has created new opportunities for cybercriminals to exploit vulnerabilities and launch attacks.
Financial Incentives	Cybercrime is often driven by financial gain. India‟s growing economy, increasing digital transactions, and adoption of digital payment systems have provided cybercriminals with lucrative opportunities for financial fraud, including phishing attacks, online scams, and credit card fraud.
Lack of Cybersecurity Awareness	Despite the increasing digital literacy, many individuals and organizations in India still lack sufficient awareness of cybersecurity best practices. This lack of awareness leaves them vulnerable to social engineering techniques, malware attacks, and other cyber threats.
Data Privacy Concerns	With organizations‟ increasing collection and storage of personal data, data privacy concerns have risen. The unauthorized access, theft, or misuse of personal information can lead to identity theft, financial fraud, and other forms of cybercrime.
Lack of cyber hygiene	Cyber hygiene refers to the set of practices and behaviors individuals and organizations adopt to maintain a secure and safe digital environment. It encompasses a range of actions and precautions aimed at protecting digital assets, systems, and data from cyber threats and vulnerabilities.

13.

Mention about the epicenter of cybercrimes in India?

• According to a 2023 report, „A Deep Dive into Cybercrime Trends Impacting India‟ by the Future Crime Research Foundation, an IIT Kanpur incubated start-up, among the top 10 cybercrime epicentres are Bharatpur – Rajasthan (18%), Mathura – Uttar Pradesh (12%), Nuh – Haryana (11%), Deoghar – Jharkhand (10%) and Jamtara – Jharkhand (9.6%).
• The report said several common factors contribute to their vulnerability, including geographical proximity to major urban centers, limited cybersecurity infrastructure, socioeconomic challenges, and low digital literacy.

14.

What are the impacts of cybercrime in India?

Impacts	Analysis
Financial Losses	Cybercrime has resulted in substantial financial losses for individuals, businesses, and the Indian economy as a whole. Financial frauds, online scams, and identity thefts have become rampant, causing individuals to lose their hard-earned money and businesses to suffer significant financial setbacks. According to the report of the Norton LifeLock survey, Rs. 1.24 trillion was lost in India in the past 12 months due to cybercrime. In 2024, India faced significant losses from digital arrest scams, with ₹1,777 crore lost in the first four months alone. Karnataka reported the highest number of cases, totalling 641 and ₹109 crore lost.
Data Breaches and Privacy Concerns	Data breaches have become a recurring nightmare for Indian organizations, leading to the compromise of sensitive personal and financial information of millions of individuals. Such breaches erode public trust and raise concerns about privacy and data protection.
Disruption of Critical Infrastructure	Cyberattacks targeting critical infrastructure, such as power grids, transportation systems, and government networks, pose a severe threat to national security. These attacks can disrupt essential services, cause economic instability, and even compromise public safety.
Social and Psychological Impact	Cybercrime not only affects individuals and organizations financially but also has a profound social and psychological impact. Victims of cyberbullying, online harassment, and cyberstalking often suffer from emotional distress, anxiety, and depression. The psychological toll of cybercrime can be long-lasting and devastating.

15.

Enlist global measures to tackle cybercrime?

Measure	Analysis
Interpol Cybercrime Global Strategy 2022- 2025:
Potential UN Cybercrime Treaty	UN member states have been negotiating an international treaty on countering cybercrime. If adopted by the UN General Assembly, it would be the first binding UN instrument on a cyber issue.
Budapest Convention	The Budapest Convention, also known as the Council of Europe Convention on Cybercrime, is an international treaty that aims to combat cybercrime. The treaty focused on harmonizing laws and increasing cooperation across borders so that a range of cybercrime could be prosecuted in the multiple countries affected. India decided not to participate in this convention.

16.

Enlist measures taken by the Government of India to combat cybercrime in India?

Measure	Analysis
Indian Cyber Crime Coordination Centre (I4C)	The Indian Cyber Crime Coordination Centre (I4C) is a government initiative to deal with cybercrime in India, in a coordinated and effective manner. It is affiliated to the Ministry of Home Affairs, Government of India. The scheme was approved in October 2018 with a proposed amount of ₹415.86 crore.
National Cyber Forensic Laboratory	A National Cyber Forensic Laboratory (NCFL) has been set up at the Central Forensic Science Laboratory, Hyderabad to investigate important cases of digital fraud / cyber forensics. This laboratory acts as a Model Laboratory for other Central and State Forensic Science Laboratories in the country.
CyTrain Porta	A Massive Open Online Courses (MOOC) platform for capacity building of police officers, judicial officers, and prosecutors through online courses on critical aspects of cyber-crime investigation, forensics, and prosecution.
National Cyber Crime Reporting Portal
Information Technology (IT) Act, 2000	It is a comprehensive legislation that addresses various aspects of electronic governance, digital signatures, data protection, and penalties for cybercrimes.
Citizen Financial Cyber Fraud Reporting and Management System	It is a system for immediate reporting of financial frauds and assistance in lodging online cyber complaints through a toll-free helpline.
Cybercrime Prevention against Women and Children (CCPWC) Scheme	The Government implements a scheme of Cyber Crime Prevention against Women and Children (CCPWC) under Nirbhaya Fund. A National Cybercrime Reporting Portal (NCRP) www.cybercrime.gov.in has been launched under CCPWC to report all types of cybercrimes with special focus on cyber-crimes against women & children. A toll-free Helpline No. 1930 is also operational in all States/ UTs. NCRP has had more than 16.18 Crore visitors. Around 1.94 lakh Child Pornography/ Rape or Gang Rape (CP/RGR) complaints have been reported as on 30.04.2024.
Central Assistance for Modernizatio n of Police	Providing financial support to States/UTs for acquiring modern weaponry, advanced communication/forensic equipment, and cyber policing equipment. An overall outlay of Rs. 4846 crore under the scheme of “Assistance to States & UTs for Modernization of Police (ASUMP)” has been approved for five years during the period from 2021-22 to 2025-26.

17.

How to protect oneself from cybercrimes?

What is the relevance of the topic for UPSC CSE?

For Prelims: Cyber Crime, Seventh Schedule of the Constitution, Internet of Things, Crypto-Currency, Massive Open Online Courses.

For Mains: Internal security,Cyber Crime, Related Challenges and Measures to Deal with it.

Some Previous Years Prelims Questions