New ‘boss’ scam to dupe corporate employees busted

Ahmedabad Cyber Crime has uncovered a classy Rs 1.5 crore WhatsApp fraud, resulting in arrests and revealing a global cybercrime community spanning China, Pakistan, India, and Hong Kong, highlighting the rising risk of ‘Cybercrime as a Service’.

Illustration: Dominic Xavier/Rediff

A Rs 1.5-crore WhatsApp fraud has blown the lid off a cybercrime community spanning China, Pakistan, India and Hong Kong, with Ahmedabad Cyber Crime Department securing greater than 10,000 units from potential ‘boss rip-off’ and arresting two key SIM-and-OTP suppliers in West Bengal.

The arrested accused, recognized as Imran Ali Piyada and Injammul Molla, have been traced to West Bengal via technical evaluation, in keeping with a launch issued by the Cyber Crime Department on Tuesday.

Understanding The Refined ‘Boss Rip-off’

The ‘boss’ rip-off, often known as CEO impersonation fraud, is a classy cyber fraud by which criminals impersonate senior firm executives or officers of regulatory our bodies such because the Reserve Financial institution of India or Securities and Trade Board of India to deceive staff into transferring massive sums of cash or sharing delicate firm info.

The investigation started after an Ahmedabad-based businessman was allegedly duped of Rs 1.5 crore via a WhatsApp-based impersonation rip-off.

The fraudsters initially posed as officers of the Reserve Financial institution of India and later impersonated officers of the complainant’s firm.

On June 23, an unidentified individual despatched a ZIP file to the complainant’s cellular quantity by way of WhatsApp, claiming there have been ‘uncommon transaction actions’ within the firm’s checking account and warning of potential restrictions or suspension by the RBI’s Danger Management Division.

The fraudsters, posing as the corporate proprietor, then allegedly instructed the corporate’s accountant to switch Rs 1.5 crore to a checking account, in keeping with the Cyber Crime Department.

The complainant reported the fraud via the cybercrime helpline 1930, following which Rs 1.13 crore of the defrauded quantity was recovered, officers mentioned.

Function Of SIM And OTP Suppliers In Cybercrime

Primarily based on technical evaluation of cell phone numbers, police traced and apprehended the 2 accused in West Bengal.

In accordance with police, Piyada, an arts graduate and a Level of Sale (POS) agent for telecom service suppliers, allegedly misused clients’ biometric fingerprints to acquire SIM playing cards and subsequently activated numbers on dummy SIM playing cards with out their data.

He allegedly provided these numbers and WhatsApp accounts to cyber criminals and offered the OTPs required to activate the accounts.

Police mentioned Piyada bought round 21,000 OTPs for e-commerce and on-line gaming functions over 5 years, incomes greater than Rs 21 lakh. He additionally allegedly bought round 900 OTPs used to activate WhatsApp accounts, incomes greater than Rs 2.25 lakh.

The second accused, Injammul Molla, allegedly coordinated with individuals concerned in cyber fraud and assisted in offering cellular numbers, dummy SIM playing cards and WhatsApp-based communication methods used within the crimes, the police mentioned.

Uncovering The Worldwide Cybercrime Community

The Cyber Crime Department mentioned 252 complaints had been registered with the Nationwide Cybercrime Reporting Portal throughout 26 states in reference to practically 4,500 cellular SIM playing cards allegedly provided to cyber criminals by the duo.

These included 194 on-line monetary fraud complaints and three BOSS rip-off complaints, together with circumstances associated to social media, hacking and different cyber offences.

Police mentioned the operation additionally highlighted the emergence of ‘Cybercrime as a Service’, the place teams and hyperlinks on on-line platforms, together with WhatsApp, are allegedly used to overtly purchase and promote OTPs and different digital assets required for cyber crimes.

Technical and community evaluation by the Indian Cyber Crime Coordination Centre (I4C) and the Ahmedabad Cyber Crime Department indicated that the malware (for the boss rip-off) was suspected to have been developed by cyber criminals related to China and used to focus on Indians via a name centre in Islamabad, the discharge mentioned.

Financial institution accounts linked to the fraud have been allegedly accessed via a China-based VPN service, whereas the investigation has preliminarily indicated using cyber infrastructure related to China, India, Pakistan and Hong Kong to hide the identities and areas of these concerned.

Stopping Future Cyber Assaults

Police mentioned the coordinated motion helped safe greater than 10,000 contaminated units from potential “BOSS rip-off” assaults and forestall potential losses operating into crores.

Malware recognized via the Sahyog Portal can be being usually blocked, they mentioned.

The modus operandi concerned sending a malicious ZIP file containing .exe and .dll information to firm officers whereas impersonating RBI or authorities officers.

As soon as opened via WhatsApp Net, the information allegedly enabled criminals to achieve management of the WhatsApp session and impersonate the corporate’s CEO or director to instruct finance employees to switch cash.

Police seized seven cell phones and a router, with a complete estimated worth of the seized property at Rs 19,500.

Additional technical examination of the units is underway to determine different suspects and digital proof, the discharge added.

Police suggested residents and firms to not open ZIP, .exe, .dll or .apk information obtained from unknown sources and to independently confirm any request for monetary transfers.