CHRIST College, Bangalore ! ️ Cyber Raksha - Talk on Cyber Security and Awareness. Delivered Seminar to MBA Final Year On Importance of Cyber Security for the Corporates ! My Initiative Cyber Raksha Aims is to Build a Culture of Cyber Safety education specially in Colleges, Schools and Corporates. Lets Transform Digital India into a SECURE DIGITAL INDIA ️ [+] Buy and Implement Secure Technology [+] Train Employees on Cyber Security - Don’t Spend all money on Secure Technology, train employees on Cyber Security. [+] Use Secure Development frameworks for developing applications [+] Understand how your application can be attacked. Short Video of my Talk : https://youtu.be/z-sanhJsXtc #CyberRaksha #Hackdoor #VanshitMalhotra #CyberSecurity #Infosec #SecureDigitalIndia #CyberSecurityAwareness #CyberSecurityTraining

1. CYBER - RAKSHA
ONLINE SAFETY IN DIGITAL INDIA
A HACKDOOR INITIATIVE
HTTPS://WWW.FACEBOOK.COM/CYBER.RAKSHA/
By
VANSHIT MALHOTRA
@vanshitmalhotra

2. DISCLAIMER
The slides and Seminar are purely for educational
and awareness purposes. The author is not
responsible if any of the techniques shown during the
seminar are misused to cause any damage to
anyone. You and only you are responsible if these
techniques/knowledge are used for illegal purposes.
2

3. WHO-AM-I
Vanshit Malhotra
Certified Ethical Hacker C|EH , C|HFI
Cyber Security Expert
Ethical Hacker and Cyber Security Researcher
Speaker at International Security Conferences
Previously worked as a Security Consultant for Government of India [UIDAI]
Cyber Crime Prevention and Investigation Consultant
sec.maniac@yahoo.com vanshitm
@vanshitmalhotra vanshitmalhotra
3

4. CHAT WITH ME !
• Cyber Crime by QR Code jacking !
• Quick Demo !
• Don't scan the unknown QR !
4

5. CYBER CRIME
PAST - PRESENT
State Sponsored HacksScript Kiddie
V/s
5

6. U THINK U PROTECTED ?
• Remote Exploit - Eternal Blue
• Quick Demo !
• NSA Exploit Leaked by Shadow Brokers !
• Video Link : https://www.youtube.com/watch?
v=KdjRtqSJee8&t=23s
6

7. STATE SPONSORED HACKS
• Governments Hacking Governments !
• Cyber Criminals hired by Governments
• More time is spent on Research than attack !
• Very Difficult toTrace !
• Deep Web is used -
7

8. DEEP WEB
• Google Shows only 0.04% of Internet !
• Deep Web - Hidden Web
• NotVisible in Google Searches
• Transactions are generally in BitCoins - Untraceable.
• Sometimes special software needed to connect to Deep
Web -TOR
8

9. ORGANISED CYBER CRIME
• Cyber Criminals use deep Web to provide
services : Drugs,Weapons,Assassins , Human
Trafficking !
• Even Report Abuse option to block bad
Drugs :p !!!
9

10. Silk Road - Market Place on Dark Web
10

11. CYBER ESPIONAGE
• A new way of Shutting Down Rival Business !
• If Website is down - Customer Cant order !
11

12. EQUIFAX HACK
• Keeps Financial Records for almost every American Citizen , 145 million !
• Apache Struts, and CVE-2017-5638 vulnerability
• Data included but not Limited to : Social Security Numbers, Date of Birth,
Drivers License,A/c Info
• Your Account Can be Accessed and New ones opened !
• Equifax hackers stole 200k credit card accounts in one fell swoop
• This information is available on Dark Web for SALE !
12

13. E-COMMERCE !
• Money is now Online : Paytm, Uber, BigBasket,
Amazon !
• E-Commerce is HOT target due to financial data
presence.
• Card Data Sold on Dark Web !
13

14. CYBER CRIME IN INDIA
• Cyber Crime is Everywhere
• Every 10 minutes Cyber crime is happening in
India
National Crime Record Bureau of India
• Maximum Cyber Criminals are young
14

15. CYBER CRIME IN INDIA
Misuse of
Social Media
Banking Frauds and
Financial Frauds
15

16. INFAMOUS SOCIAL MEDIA
CRIMES
• Blue Whale , Momo Challenge
• People create impressions due to viral social media
posts.
• Privacy Breach due to sharing of content on Social
Media.
• If it is free, its probably jacked !
16

17. INFAMOUS BANKING CYBER
CRIMES
• Calling from the Bank - Phone Call Frauds
• Card Frauds
• Rural Areas -Victim to OTP frauds to verify
Aadhar
17

18. TRANSFORMING
DIGITAL INDIA
TO
SECURE DIGITAL INDIA
• Secure Frameworks for Developers and Programers
• Report Cyber Crimes to Law Enforcement Authorities.
(Even a stolen smartphone)
• Update all software and Firmware.
• Law Enforcement and Judiciaries need to be empowered.
18

19. CYBER SECURITY FOR
CORPORATES
• People ~> Progress ~>Technology
• Buy and Implement SecureTechnology
• Train Employees on Cyber Security - Don’t Spend all money on
SecureTechnology, train employees on Cyber Security.
• Corporates must have a dedicated budget for Cyber Security
• Use Secure Development frameworks for developing applications
• Understand how your application can be attacked.
19

20. FINAL NOTES
• India is not a Country Run By the Rules ! Be Cyber Aware !
• Basic Cyber Security Awareness needed for every Indian Citizen. Only
then we can transform Digital India into Secure Digital India.
• We can Patch theTechnology but there is no “Patch for Human
Stupidity” !
• Virtual World is not a game, its a life !
• Our Aim is to Build a Culture of Cyber Safety education specially in
Colleges, Schools, Rural Areas and Corporates.
20

21. CYBER RAKSHA
HACKDOOR INITIATIVE
VANSHIT MALHOTRA
21