This presentation is based on the lectures delivered for students of B. Voc. (Semester 2 ) Computing Skills (TISS) at HMMRA, Vile Parle, Mumbai during January – February 2019 Contents of this presentation may also be useful to other students pursuing similar courses.

1. Prof. Mukesh N Tekwani (mukeshtekwani@outlook.com)

2. For Whom ?
This presentation is based on the lectures delivered for
students of B. Voc. (Semester 2 ) Computing Skills (TISS) at
HMMRA, Vile Parle, Mumbai during January – February 2019
Contents of this presentation may also be useful to other
students pursuing similar courses.
--- Prof. Mukesh N Tekwani, Mumbai
mukeshtekwani@outlook.com
2

3. Cyber?
1. The term Cyberspace was first coined by William
Gibson in 1982, in his novel Neuromancer.
2. Cyber - relating to computers, information technology
and virtual reality
3

4. What is Cyber Crime?
1. Any illegal activity committed using a computer and / or
Internet
2. Cybercrime is - “unlawful acts wherein the computer is
either a tool or a target or both”.
3. Cyber crime is an extension of existing illegal activities
4

5. Causes of Cyber Crime
1. Internet makes it easy to do a cyber crime
2. ‘Crime at a distance’ - the perpetrator does not have to be
at the scene of the crime
3. The criminal can be faceless – till the crime is solved, if it is
solved!
4. Conviction rates are fairly low as technology makes the
detection process difficult
5. Low risk – high returns – low convictions => this has led to
increase in cyber crime
5

6. Basic Terminology - 1
1. Threat – An event or an action that has got the ability to
violate the security or to compromise the system
2. Exploit – a way to breach the security of a machine
through a loophole or a vulnerability
3. Vulnerability – A weakness in the design or existence of a
loop hole that could lead to undesirable or unexpected
events that could compromise the security
6

7. Basic Terminology - 2
4. Attacker – Any individual who compromises the security of
a machine in order to steal, manipulate or cause
destruction of data
5. Attack – The action that is performed by an attacker that
would harm the system or the information stored in it
6. Data Theft – Action of stealing data/information from the
victim’s machine
7

8. Types of Cyber Crimes
1. Crimes against Persons – stalking, nuisance, harassment,
defamation
2. Crimes against property – data, information, computer,
communication device, damage to source code
3. Crimes against government – cyber terrorism, cyber war
4. Social media crimes
8

9. Types of Cyber Crimes
1. Traditional crimes – fraud, cheating
2. Identity Theft
3. Banking frauds
4. Property Crimes – infiltration of computers with malicious
software – through email attachments, websites.
5. Theft of bandwidth
6. Crimes against businesses
9

10. Types of Cyber Crime
7. Misuse of Social Media Platforms, spreading of fake news
8. Defamation
9. Threats
10. Pornography
11. Hacking
12. Planting viruses
13. IPR thefts – Intellectual Property Rights
14. Ransomware
15. Tech support scams (non-existing malware, etc)
10

11. Challenges
1. New technologies
2. New threats
3. Complex networks
4. New vulnerabilities
5. Limited focus on security
6. Limited security expertise
11

12. Cyber Crime Against Individual
- Cyber stalking – use of technology to harass someone e.g.
false accusations,
- Distributing pornography
- Trafficking
- Grooming – harassment or seduction of a minor by an adult
- Spying – obtaining secrets without the permission of the
holder of information (reading another person’s email)
- Juice jacking
12

13. 13

14. Cyber Crime - Hacking
- Hacking
- A person’s
computer is
broken into so that
the personal and
sensitive
information can be
stolen
14

15. Cyber Crime - Hacking
- Indian Websites hacked in recent past:
- 2016 – 33,147
- 2017 – 30,067
- 2018 – 15,779
- The Indian Computer Emergency Response Team (CERT-In)
issues alerts and advisories regarding latest cyber threats
and countermeasures.
15

16. Cyber Crime - Hacking
- Hacking
- The hacker uses a variety of software tools to get into a
computer system.
- The victim may not even be aware that his system has
been hacked
- Ethical hacking is a different concept – here organisations
may employ hacker to test their systems for weakness or
vulnerabilities
16

17. Cyber Crime - Theft
- Theft
- Violation of copyright laws
- Downloading music for commercial purpose
- Download images for commercial purpose
- Download games and movies without paying for them
- Some websites encourage software piracy and these
websites are now being shut down
- REMEMBER!!! – Downloading software, music, movies
and games without paying for it is a Theft
17

18. Cyber Crime - Stalking
- Stalking
- Online harassment
- Victim is sent numerous
messages/emails
- The stalker knows the victim
- May not be doing offline
stalking
- Remember these words –
follow, shadow, go after, be
after, trail, follow
18

19. Cyber Crime – Identity Theft
- Identity Theft
- Deliberate use of someone’s identity
- Someone steals your identity – name, address,
- Passport details
- That ’someone’ becomes you
- Then he/she can pretend to be you, and misuse your bank
accounts, credit cards, debit card and other sensitive
information
- He/she can buy things online in the victims name
- Causes financial loss and spoils the credit history 19

20. Cyber Crime – Identity Theft
- How do Attackers carry out Identity Theft?
- Phishing – fake sites are created by fraudsters who trick
victims into giving out their information
- Social Engineering – art of manipulating human emotions for
getting sensitive information
- Hacking – If victim’s computer or mobile is compromised,
hackers will get maximum information
- Personal data Theft – credit card info, checks, PAN card and
Aadhar card details.
20

21. Cyber Crime – Identity Theft
- What to do?
- Contact banks immediately
- Freeze your bank accounts
- Change your passwords
- Block credit / debit cards
- FIR at nearest police station
- Contact your mobile service provider and get a new SIM
card in your name
21

22. Cyber Crime – Identity Theft
- Frauds
- Financial frauds
- Gain control over bank accounts
- Get loans based on your identity
- Credit card frauds
- Mobile phone frauds
- Frauds pertaining to government documents
22

23. Cyber Crime – Malicious Software
- Malicious Software or Malware
- Such software is intentionally designed to cause damage
- These are software or programs that are used to disrupt a
network.
- Such software can be used to
- steal data
- Cause damage to a server
- Slow down or bring down a network
23

24. Cyber Crime – Phishing
- Phishing
- The thief (phisher) sends a deceptive email to the
recipient tricking him into providing personal account
details (username/password).
- The phisher will provide the user a link to “sign in” at an
official-looking website,
- This site looks almost identical to a real vendor’s website
with similar design but built specifically to collect personal
information.
- That information will be used against the victim later.
24

25. Cyber Crime – Phishing
25

26. Cyber Crime – Vishing
- Vishing
- Vishing uses phone to extract data through voice calls
- The visher will make cold calls to the victim posing as a
representative of the victim’s bank, income tax dept., or
insurance company
- Other times these calls will be automated with voice
prompts.
- The plan is to gain access to the victim’s financial and
personal information.
26

27. Cyber Crime – Vishing
27

28. 28

29. 29

30. Cyber Crime – Mobile Wallet
30

31. Cyber Crime – Mobile Wallet Frauds
- Transfer money from one wallet to another.
- Or, attacker will purchase goods such as mobile phone,
etc. Later they sell this to others.
- Never store a large amount on money in mobile wallet
- Never store credit/debit card details in your mobile wallet.
31

32. Cyber Crime – Debit/Credit Card Frauds
- Don’t keep information about your credit/debit card in
your mobile
- Remember the CVV number on your card and remove it
from the card itself.
- Money stolen from your mobile wallets can be stored in
other stolen wallets and in that case you would become
not just a victim but even the perpetrator
- Never allow apps to read your SMS – else OTP can be read
and transferred
- Don’t use public Wi-Fi to access secure data – banks, etc
32

33. Cyber Crime – Responsibility of Banks
33

34. Cyber Crime – Responsibility of Banks
34

35. 35

36. 36

37. 37

38. 38

39. 39

40. 40

41. Passwords
- 123456
- password
- 123456789
- Abc123
- admin
- !@#$%^
- Godhelpme
- Donald
- qwerty123
- Use passphrases of 12 characters or
more
- Use different password for each site
- Change password frequently
- Song/phrase/….
41

42. Never Respond To These
- Free credit card offers
- Credit card offers
- Lottery schemes from ANYWHERE in the world
- ‘RBI’ lottery
- Income Tax department ‘REFUND’ notice
- ‘Loan is Ready’ emails
- ‘Friendship’ emails
- Bank ‘confirmation email’
- ‘Your email account will be blocked’ emails
- Government jobs emails – Jobs? Government? Joking??
42

43. Safe Disposal of Old Hardware
- Companies sell their old hardware – disks, servers,
without wiping sensitive data on them.
- These servers contain credit card details, health records,
source code for controlling fire-fighting equipment, street
lights, etc
43

44. Cyber Crime – Cyber Terrorism
- Cyber Terrorism
- Use of Internet-based attacks in terrorist activities
- Large scale disruption of computer networks
- Use computer viruses to disable computers
- DOS attacks (Denial of Service)
44

45. Cyber Crime Against An Entire Country
- Business Insider (India), Dec 22, 2018
- Gatwick Airport – Britain’s 2nd busiest airport, Europe’s 8th.
- Brought to a standstill for 36 hours by – a drone and 2
people.
- What they did? – illegal flying of drones near the airport
- Army had to be called in.
45

46. Cyber Crime Against An Entire Country
- What happens if hackers take an entire country offline?
- Lights off
- Power supply disrupted
- Communications
- Transport – rail, air  affected
- If Temperature sensor hacked in a factory, hacker can set
up the place on fire
- Cyber terrorism becomes a means of mass destruction
- Enemy is hidden so whom to you attack?
46

47. Cyber Crime Against An Entire Country
- In December 2017, 3 men caused the largest internet outage in
history - a distributed "denial of service" attack
- blacked out the web across most of the US and large chunks of
Northern Europe for about 12 hours.
- How did they do it? They had disabled Dyn, a company that
provides Domain Name System (DNS) services - the web's
directory of addresses, basically - to much of the Internet.
47

48. Cyber Crime Against An Entire Country
In April 2018, the African country of
Mauritania was taken offline for two days
when someone cut the single undersea
cable that serves its internet.
Who did this ?
Neighbouring country Sierra Leone
48

49. Cyber Crime - Ransomware
 In May 2017, Wannacry virus affected Britain’s
National Health Service
 It locked up user’s computer and demanded a ransom
 By December 2017, the US govt confirmed that the
North Korean government was responsible for the
attack.
49

50. 50

51. What the Internet Knows About You
“Google Will Soon Know You Better Than Your Spouse Does”
– Ray Kurzwel, Director of Engineering at Google
51

52. Top Global Risks in Terms of Likelihood
Extreme Weather events1
Natural Disasters2
Cyber attacks3
Data fraud or Theft4
52

53. Cyber War
- Cyber War is defined as “ the use of computer technology to
disrupt the activities of a state or organisation”. Also called
“bloodless war”
- Estonia – 2007
- Iran – 2010 – Stuxnet virus – affected Iranian nuclear
weapons plant. This code was installed by using USB key !
- Cyberwarfare is cheap – compared to building nuclear
missiles
- It can affect all communications, bring down power grid
53

54. Case Study – Cyber Attacks of Estonia
- April 27, 2007 – Estonia hit by a massive cyber DDOS
(Distributed Denial of Service) attack
- Online services of banks, govt organisations, media houses,
police were taken down due to unprecedented levels of internet
traffic
- Huge amounts of automated online requests swamped the
servers for 2 weeks
- Result?
- ATM and banking services x
- Govt employees could not communicate on email
- Broadcasters and newspapers could not deliver news 54

55. TEST - 1
- Pick a term that describes the following:
data, cyber, vulnerability, phishing, wishing, hacking, vishing,
information, exploit, juice jacking, threat
1. Relating to Internet _________
2. Roll No : 386 __________
3. Way to breach security _________
4. Weakness in the system _________
5. Action that can violate the security of a system ________
6. Stealing data while charging a phone ___________
55

56. TEST - 2
- Classify the following crimes by writing them under appropriate
columns:
Damage to source code, stalking, cyber terrorism, defamation,
damage to data, damage to communication devices, cyber war
identity theft, grooming
Crime against Persons Crimes against
Property
Crimes against
government
56

57. TEST - 3
Describe these terms in atleast 5 sentences
- Hacking
- Phishing
- Vishing
- Cyber terrorism
- Safe passwords
57

58. TEST - 4
In your own words, explain the reasons behind cyber crime
58

59. TEST - 5
CONGRATULATIONS!!!
You have been appointed as the Chief Information Security Officer
of the multinational bank FBN Bank.
What advice will you give to your bank customers to protect their
accounts?
59

60. TEST - 6
In your words describe cyber stalking and child soliciting
60

61. THANK YOU
PROF. MUKESH N TEKWANI
MUKESHTEKWANI@OUTLOOK.COM
Feb 4, 2019