Passengers must go through various airport checkpoints, presenting their tickets, IDs, and other relevant documents. The idea behind Digi Yatra is to use Facial Recognition Technology (FRT) to verify the identity associated with passengers’ boarding passes. This paperless and contactless processing is both efficient and time-saving. Digi Yatra is a biometric boarding system that uses […]
The post Passengers’ Data Stored on User Devices, not on DigiYatra Storage, says India Govt appeared first on BeEncrypted.
]]>Passengers must go through various airport checkpoints, presenting their tickets, IDs, and other relevant documents. The idea behind Digi Yatra is to use Facial Recognition Technology (FRT) to verify the identity associated with passengers’ boarding passes. This paperless and contactless processing is both efficient and time-saving.
Digi Yatra is a biometric boarding system that uses facial recognition technology to provide passengers with a smooth and hassle-free airport experience. The initiative aims to make air travel less stressful for passengers. DigiYatra eliminates the need for physical document verification at multiple airport flash points, such as tickets and IDs.
In December 2022, the Ministry of Civil Aviation launched Digi Yatra, beginning with three airports in Delhi, Bangalore, and Varanasi. The goal is to use facial recognition technology to determine a traveler’s identity, which will link to the boarding pass. This procedure allows passengers to pass through various airport checkpoints without presenting any paper or ID.
To enjoy the program’s benefits, passengers must first download the Digi Yatra app and register. The DigiYatra app registration process includes Aadhaar-based validation and self-image capture. The next step is to scan your boarding pass and share your credentials with the airport within 24 hours of your flight.
When you arrive at the airport, you must first scan your physical or mobile boarding pass and look into the FRS camera of the E-Facial Gate. The system will automatically validate your ID and travel documents with the backend before opening the E-gate and allowing you to enter the airport. Once an individual completes the process, they can enter the terminal building for check-in and security clearance without needing any paper documents.
Digi Yatra service is available at some of India’s busiest airports, including Delhi, Bangalore, and Varanasi. Kolkata, Pune, Vijayawada, and Hyderabad airports will adopt this service by April 2023. The civil aviation ministry has stated that airports nationwide will deploy this upgraded travel procedure.
The Ministry of Civil Aviation has clarified that Digi Yatra does not store passenger data. They stated Digi Yatra lacks a central storage facility for storing passengers’ Personally Identifiable Information (PII). Moreover, all passenger data is encrypted and stored in their smartphone wallets. They went on to say that the data shared for validation at the airport is automatically deleted 24 hours after departure.
Similarly, the minister of civil aviation, Shri Jyotiraditya M. Scindia, reinforced this point in response to a tweet via his tweeter handle on March 15th, 2023. He reassured users that their data was secure, stating that no information was collected or stored.
“Passengers’ personal information data is not stored in any central repository or by the Digi Yatra Foundation. The data is stored in the passenger’s own phone in the Digi Yatra secure wallet. Rest assured; no data is being collected or stored.”
Digi Yatra is changing the face of Indian aviation to achieve the goal of Digital India. Although the project is still in its early stages, it has received much attention, with some hailing it as efficient and innovative. According to some experts, the initiative has the potential to transform the customer experience and position Indian aviation at the forefront of global innovation.
According to the Ministry of Civil Aviation, its implementation has no budgetary support. Airport operators are responsible for the costs associated with Digi Yatra implementation.
Airport and airline operators are spreading the word about Digi Yatra through boarding passes and in-flight announcements. They also achieve publicity through social media, films, help desk support, and displaying banners at airports, among other things.
The post Passengers’ Data Stored on User Devices, not on DigiYatra Storage, says India Govt appeared first on BeEncrypted.
]]>A safe and secure digital world necessitates a clear definition and enforcement of international cyberspace rules, according to NCSC chief executive Lindy Cameron during a speech at Tel Aviv University’s Cyber Week. According to Cameron, “we must be clearer about the guidelines and norms that transcend international borders” in order to keep the digital world […]
The post NCSC Chief: Clear Rules Needed to Prevent Cyberspace Conflict and Struggle appeared first on BeEncrypted.
]]>According to Cameron, “we must be clearer about the guidelines and norms that transcend international borders” in order to keep the digital world a place of opportunity rather than conflict. The use of cutting-edge new technologies and increased international cooperation are two examples of this.
However, she acknowledged that cyberpowers are becoming more advanced. However, these tools must be produced and used “in a manner that is legal, responsible, and proportionate.”
A clear understanding of how and when cyber capabilities can be used is essential to reining in irresponsible cyber behaviour. The tightening of export controls by Israel on these tools, according to Cameron, “makes it far more difficult for nations with concerning records on privacy and human rights to acquire such intrusive spyware.”
There must be appropriate safeguards in place to prevent misuse of this technology and its capabilities by everyone involved, from developers to users, she said.
“Incredible” work by Ukraine’s cyber defenders during the ongoing conflict with Russia was also praised by Cameron in her speech. According to her, Russia has “consistently used cyber pressure to stress its rivals… to distract them and, where possible, to disable them.” The Ukrainian cyber defenders, on the other hand, have done an amazing job of repelling many of these attacks. True heroes, they are. To be successful, one must be resilient and well-prepared.
Cameron, on the other hand, believes that China will continue to pose the greatest long-term strategic challenge. Technology is being used by the Chinese government to exert pressure and maintain control. Exporting this vision is possible because of the country’s technological and economic prowess.”
As a result, countries that share liberal values must collaborate “to develop technologies and systems that allow us to avoid dependence on products not aligned with our values.”
In addition to national-state actors’ threats, Cameron reaffirmed previous statements about the growing threat of ransomware from cyber-criminal gangs. As ransomware-as-a-service continues to grow, so does the threat it poses to society, according to her. Because of this and the efforts of our law enforcement partners, we’ve spent the last year getting a better understanding of how ransomware works. As a result of our efforts, we hope to reduce profits and increase the risk to criminals. It’s important for us to understand the scale, nature, and evolution of their methods,” she said.
The post NCSC Chief: Clear Rules Needed to Prevent Cyberspace Conflict and Struggle appeared first on BeEncrypted.
]]>This month, Cleafy’s security researchers discovered a new Android Banking Trojan in the wild. According to reports, the malware tool has been dubbed “Revive” because of its ability to restart itself if something goes wrong. Cleafy, in a Monday advisory, explained that Revive was created to focus on a specific set of goals (currently, Spanish […]
The post ‘Revive’ has been upgraded to a banking Trojan on Android appeared first on BeEncrypted.
]]>According to reports, the malware tool has been dubbed “Revive” because of its ability to restart itself if something goes wrong.
Cleafy, in a Monday advisory, explained that Revive was created to focus on a specific set of goals (currently, Spanish banks).
Researchers say Revive’s attack methodology is similar to that of other banking trojans because the malware still makes use of accessibility services to perform keylogging activities and intercept SMS messages from the target.
The Cleafy app would ask users to grant permissions for SMS and phone calls when they first installed the app using various social engineering techniques.
Revive would then redirect users to a cloned page (of the targeted bank) and prompt them to enter their credentials once the permissions had been granted.
Additionally, any two-factor authentication (2FA) or one-time password codes (OTP) codes sent via SMS or phone call by banks would then be sent to the C2 of the threat actors (TAs).
Last but not least, Revive would direct victims to a generic home page with links to the legitimate bank’s website in order to prevent users from becoming alarmed.
Cleafy’s initial analysis of Revive’s code revealed that both of the samples obtained by Cleafy currently have a very low detection rate by Antivirus solutions (AVs).
The Revive malware appears to be based on FastAPI, a Web framework for developing RESTful APIs in Python, and sections of the code of both malware instances appear to be similar, according to the security researchers who discovered the malware.
Nevertheless, the threat actors responsible for Revive would have altered it to perform account takeover attacks after that… (ATO). Cleafy categorised Revive as a banking trojan rather than spyware because of this difference.
A few days earlier, Cleafy had upgraded the BRATA Android malware group to the category of “advanced persistent threat” (APT).
The post ‘Revive’ has been upgraded to a banking Trojan on Android appeared first on BeEncrypted.
]]>Unpatched Microsoft Exchange servers in various Asian countries were the target of an attack campaign discovered by Russian cybersecurity firm Kaspersky. The threat actors exploited the above vulnerabilities to gain access to the industrial control systems (ICS) of telecommunications companies in Pakistan and Afghanistan, as well as a logistics and transportation company in Malaysia, according […]
The post Asian Industrial Control Systems Targeted by Hackers Using the Shadowpad Backdoor appeared first on BeEncrypted.
]]>The threat actors exploited the above vulnerabilities to gain access to the industrial control systems (ICS) of telecommunications companies in Pakistan and Afghanistan, as well as a logistics and transportation company in Malaysia, according to a company advisory released on Monday.
In October 2021, Kaspersky discovered that hackers were exploiting the CVE-2021-26855 vulnerability in Microsoft Exchange to gain access to user data. In spite of this, signs of the attacks on the affected systems appear to date back to March of this year.
“During the investigation, researchers uncovered larger-scale activity by the threat actor in the network of the telecommunications company and also identified other victims of the campaign,”
At various points in this hacking campaign, a legitimate executable file called AppLaunch.exe was used to launch the ShadowPad backdoor on victims’ computers, according to reports.
A legitimate OLE-COM object viewing application, OleView, would then be hijacked by attackers to launch ShadowPad. In the beginning, the threat actors would send commands manually and then automatically.
Hackers are said to have used the CobaltStrike framework, the PlugX backdoor, and various BAT files during these cyberattacks. In the original advisory, you can find a complete list.
When it came to the attribution of these new attacks, Kaspersky stated that they had an almost entirely unique set of tactics, techniques, and procedures (TTP).
The attackers’ TTP enabled us to link these attacks to a Chinese-speaking threat actor, and we observed victims located in different regions. This means that the actor we have identified may have broader geographical interests and we could expect more victims to be discovered in different countries in the future.
While it is still unclear what the attacker’s ultimate goal is, the antivirus company has stated that they believe it may be data harvesting at the time of writing.
“We believe that it is highly likely that this threat actor will strike again and we will find new victims in different countries.”
The post Asian Industrial Control Systems Targeted by Hackers Using the Shadowpad Backdoor appeared first on BeEncrypted.
]]>Over 900,000 Kubernetes (K8s) have been discovered to be vulnerable to malicious scans and/or data-exposing cyberattacks, according to a report from cybersecurity firm Cyble. Even though not all exposed instances are vulnerable to attacks or the loss of sensitive data, these misconfiguration practises may make companies attractive targets for TAs in the future, according to […]
The post Data Breaches Could Occur Due to Kubernetes Misconfigurations That Were Leaked. appeared first on BeEncrypted.
]]>Even though not all exposed instances are vulnerable to attacks or the loss of sensitive data, these misconfiguration practises may make companies attractive targets for TAs in the future, according to researchers.
Open-source Kubernetes is a system designed to automate containerized application deployment, scaling and administration.
There is no downtime in a production environment because K8s uses a combination of physical and virtual machines to create a uniform API.
For all these reasons, Kubernetes is a useful tool, but when it isn’t set up properly, it presents a risk of data exfiltration and other hacking attempts.
The Tesla cloud was breached in March 2018 due to improperly configured Kubernetes clusters, and in June 2020, cryptocurrency mining malware was spread across multiple clusters using a K8s toolkit that was infiltrated by hackers.
The open-source continuous delivery platform Argo CD has recently been found to have a vulnerability that allows attackers to access and exfiltrate sensitive information such as passwords and API keys.
Cyble researchers wrote in an advisory that “online scanners have made it easy for security researchers to find the exposure of assets.
As a result of the exposed Kubernetes instance for a particular organisation, malicious hackers can also conduct an investigation, increasing the risk of attack.”
After China and Germany, the Cyble analysis found that the United States had the most exposure.
Due to default settings, many of the clusters spotted by cybersecurity researchers were misconfigured.
Kubernetes Dashboard is vulnerable to data leakage because it is not password protected and the default service ports are open to the public. This puts businesses at risk.”
Cyble advised companies to keep Kubernetes up to date and remove debugging tools from production containers in order to avoid misconfigurations.
Additional security measures should be taken to ensure that Kubernetes API access is restricted to those who need it, and that critical assets and ports are protected to the greatest extent possible.
You can read Cyble’s full advisory here for more recommendations and technical details.
The post Data Breaches Could Occur Due to Kubernetes Misconfigurations That Were Leaked. appeared first on BeEncrypted.
]]>Internet Privacy is the main Concern today Advertisers track your online activities and interfere with your privacy. Your online transactions, email, and social media profiles are monitored continuously, thereby invading your privacy. Moreover, the number of cyber threats is growing every year. While advertisers and search engines use your data for peaceful purposes, Internet scammers […]
The post Attacks by Cybercriminals Will Become the Main Threat in 2024. Privacy Issues Tendencies appeared first on BeEncrypted.
]]>Advertisers track your online activities and interfere with your privacy. Your online transactions, email, and social media profiles are monitored continuously, thereby invading your privacy. Moreover, the number of cyber threats is growing every year. While advertisers and search engines use your data for peaceful purposes, Internet scammers seize your privacy and use it illegally.
More and more comprehensive solutions are appearing in the cybersecurity market that protect your personal space and confidential data from intrusion in an automatic mode. How such solutions work and why everyone needs, get known in Equifax Patrol review.
First, you need to understand what we are dealing with. And let’s take a look at what we should expect in 2024.
The most common type of privacy issue is tracking your activity. And we come across this every day when we go to search engines or different websites. Every website you visit uses cookies. They contain a certain amount of data by which the server can deliver a specially tailored page for the mentioned user.
Tracking is also common to major search engines like Google. They use the collected data, from personal information to activity on the Internet, to select ads. Following your interests, they send you advertisements, thereby increasing their income.
Equally important is the threat of data theft. While in the previous case, your data was used for advertising purposes, in this case, everything is much more serious. Almost every website that requests registration requires our name and date of birth. And this data is quite enough for cybercriminals to violate your privacy and cause damage. Sometimes even secure banking applications, social networks, and government agencies suffer from such violations.
Finally, we carry privacy issues with us every day. These are smartphones. They are based on applications that request your data, your location. Many of them have access to contacts, emails, notifications, and storage. Thus, without providing proper protection, we are at risk of becoming victims of fraudsters.
Every year, the protection of confidential data becomes more powerful, but scammers are not far behind. Attackers continue to search for new methods of spreading privacy threats. Leading experts in the field of cybersecurity identified the main trends for 2024, which we will face.
With the development of artificial intelligence technologies and neural networks, attackers will be able to create a variety of information fakes – deep fake, which can be used both to bypass biometric identification and to deceive the public and other purposes. A similar forecast we found in almost every report, including McAfee and Redware.
Credential stuffing is quite a new privacy threat. The numerous data leaks that occurred in 2019 will entail the active use of this data to carry out attacks. Attacks with the substitution of stolen data will become an increasingly common method of monetization for attackers. As long as the problem of data privacy remains completely unresolved, many companies should review the privacy policy to prevent even greater leaks, thereby not transferring the data personally to hackers.
Malicious applications, which the users install themselves, are still leading in attacks on users. They request special permissions, including those related to device administration, accessibility services, and screen share. However, in some cases, no special permissions are required. An example is a discovered vulnerability in Android WebView.
Another trend that directly relates to our smartphones is the expansion of the 5G network. With its expansion, one can expect an increase in the number of new types of attacks aimed specifically at the vulnerabilities of 5G hardware and software.
In 2024, there is an increase in the number of attacks on cloud services. The wider the cloud solutions penetrate our lives, the more attractive they become for attackers. Data storage services, instant messengers, and social networks are a huge resource for cybercriminals.
We recommend you to start acting right now, without waiting for the attack to begin. A few tips to help you avoid the fate of the victim:
The post Attacks by Cybercriminals Will Become the Main Threat in 2024. Privacy Issues Tendencies appeared first on BeEncrypted.
]]>The post Scammers trapping users via fake VPN services after anti-privacy bill appeared first on BeEncrypted.
]]>Unfortunately, taking advantage of such urgency, many scammers are now in haste to trap users by offering a fake VPN service.
Motherboard, a tech website that first reported the issue, said that a scammer offers “MySafeVPN” access to people through sending emails. The scammer also claimed that this VPN service is launched by Plex media streaming company.

The phony Plex email. Screenshot: Nicholas Deleon/Motherboard
The scammer has also contacted Motherboard’s writer through email and asked him to use MySafeVPN services to prevent ongoing privacy threats. The writer Nicholas Deleon authenticated the offer by asking Plex about it, yet the service proved to be fake.
However, Plex’s co-founder and Chief Product Officer, Scott Olechowski, denied launching such a service, saying, “If anything, it suggests that mysafevpn.com is super sketchy and we would recommend using almost any other VPN service with your Plex Media Server.”
It seems like the user’s information has been stolen to contact them as the customers of other services are also likely to receive such messages. To this, the most appropriate conclusion that could be made is that message boards were accessed and the details were taken.
Such scammers are like the ones who often ask users to fix their PC or mobile issues by offering them services that don’t exist. The recent user concern about the privacy of their browsing history has been used by the new scammers as a golden opportunity to take benefits.
But you can avoid these malicious attempts by sticking to the reputable and proven VPN services in the industry and has a strong customer base. You can follow our Best VPN services guide to know more about such VPN services.
The post Scammers trapping users via fake VPN services after anti-privacy bill appeared first on BeEncrypted.
]]>The post Amazon Employee Reveals New WhatsApp Bug Which Exposes Entire Chat in Plain Text! appeared first on BeEncrypted.
]]>This issue came to light when an Amazon employee Abby Fuller yesterday made tweets. These tweets were regarding an incident which she came across.
According to her, the well-recognized encrypted messaging app WhatsApp can expose your private messages under some specific circumstances.
Abby Fuller in her tweets says, she unexpectedly found some strange and hidden messages on WhatsApp which were not accompanying her contacts. All this happen after she makes a new account with WhatsApp on her new phone using a new number for the first time.
Moreover, she considers all the mysterious messages are appearing on her new account was the message history connected with the WhatsApp account of the former owner of the same mobile number, which the app pushed to her mobile phone.
In her tweets, she added that the came into view chat history was not full, but indeed the real threads or direct messages conversations. However, she did not confirm that those messages also include any message which was sent to her by the former owner.
On the other hand, setting up WhatsApp on an entirely new device along with using a new phone number cannot restore the full messages records of the person owning it previously. It is because the enterprise never backs up user’s encrypted conversations on its server.
But, it does keep pending messages on their server until they get delivered to the recipients when they return online.
It is clear that the messages Abby Fuller founds on her new WhatsApp account were the undelivered messages. All these messages sent by the contacts of the former owner once they stop using that particular number.
To prevent such happenings, WhatsApp suggests user to either delete their account before stop using a number. Also, alleviate the WhatsApp account with Change number feature which is present in the App setting options.
If you forget to delete your previous account so, there is nothing to worry. The WhatsApp instinctively removes all the unsent messages from its server with 45 days of your inactivity.
But, Fuller said that she owns the new phone number from quite a few months. It which means more than 45 days. However, there might be a bug due to which WhatsApp become in able to delete those messages. It includes all those messages were linked with the former owner of the SIM.
The post Amazon Employee Reveals New WhatsApp Bug Which Exposes Entire Chat in Plain Text! appeared first on BeEncrypted.
]]>The post WhatsApp Coming Up With Fingerprint Authentication For Android Users appeared first on BeEncrypted.
]]>This mechanism is under development for Android phones. However, the release time is still undisclosed. According to WABetaInfo, the update is in the ‘alpha stage of development’ which is the first phase among the two testing phases.
The security update has already grown the concerns as this will make it harder for law enforcement agencies and government to track the people who are using WhatsApp to carry out illegal or criminal activity. Also, the app was at backlash for the end-to-end encryption feature which means that only the individuals in conversation could see it.
WaBetaInfo tests and reports about the updates before their release. For this security update, the site reports that the new fingerprint authentication feature will come up v2.19.3 for Android. This mechanism will completely protect the app, and anyone could only open the app after applying the authentic fingerprint for the particular account.
But, it is also cleared that the fingerprint authentication will only be applicable on all the WhatsApp chats and not on any particular chat.
Talking on the matter, the former home secretary Amber Rudd told BBC, “We need to make sure that organizations like WhatsApp and there are plenty of others like that, don’t provide a secret place for terrorists to communicate with each other.”
Also, the wabetainfo has reported in October 2018 that the WhatsApp is working on Touch ID and Face ID features on iOS (the features are still under development and are not released).
The post WhatsApp Coming Up With Fingerprint Authentication For Android Users appeared first on BeEncrypted.
]]>The post Your Reddit Account Might be Locked Over Security Concern appeared first on BeEncrypted.
]]>The Reddit notification post only disclosed that the “large number of accounts were locked down due to a security concern.” It wasn’t mentioned that what was the amount. However, the post from the staffer further says that the security concern refers to the odd behaviour unlike the normal activity.
Explaining the issue, admin indicated towards a common practice of keeping similar passwords for multiple accounts. Therefore, if any of the websites is hacked, the users and their credentials will be available to the attackers. In this case, these credentials could be applied to the other popular platforms including Reddit and if a user has been using similar credential combination for any other account, it could be at risk.
With the start of 2024, the credential stuffing attacks could become more popular as they are easily carried out with the help of automated software. This software injects the compromised credentials into many popular websites so that they can find maximum matches.
According to the Trend Micro prediction, “Breached credentials will be actively and heavily used in fraudulent transactions as cyber-criminals take the next logical step after amassing data breach info dumps in past years: using these stolen credentials.”
Last year, Reddit suffered a prominent attack in which immense user data was compromised. The attack was incited by the hackers via staff accounts which were accessed through intervening SMS-based two-factor authentication codes.
Responding to the post, many redditors have said that their account had unique and strong password for Reddit. Whereas, in the yesterday’s security notice, Sporkicide mentioned that within few hours the locked account holders will be able to reset their password. The notice states, “This will take the form of either a notification to the account (yes, you’ll be able to log in to get it) and/or an email to any support ticket you’ve already sent in.”
Reddit accounts are a great attraction for users because of the easy entry, high trust for accounts, and the opportunity to push malicious content and make it viral.
Admin requested the Reddit users to set a unique and strong password. He further added, “I also encourage you to take this opportunity to make sure your email address is up to date to enable automated password resets and to add two-factor authentication to further secure your account.”
The post Your Reddit Account Might be Locked Over Security Concern appeared first on BeEncrypted.
]]>