These are slides of presentation by Rohas Nagpal, President, Asian School of Cyber Laws at CSI event IT2020 in Mumbai held on 21st Jan LinkedIN ID https://www.linkedin.com/in/rohasnagpal ; Here he explains various cases of hacking.

1. Hacking
the world
One byte at a 4me
© 2016 Asian School of Cyber Laws
Version date: 20th Jan, 2016
www.asianlaws.org

2. h"p://www.example.com/ajax/emu/end.php?
eid=AQLLhnt40jDTOPvY0l2NCXvgRt6ldoZYIRxTywNr8ywdsU6nUdZT
APTMvXD5cr56WavhJDiacFJlZ5B2rzWIUhchRHwlx_sU7diy0hk8GqAk
CemLYAsrBnFSPNsQuaCeaCUcQ_029eo_1CSvZk0qygVSApdKZ4lqcLR
mCXyPZVkcyUcHve2oVcpsfRVXgoA0PtNGbB08ZerLU6QeddP8fqwIK
UZYdMoHE1VCPFzbfuFYf6jryIswh3O6S55ShTcz16aZEPSNK5aPoQAP
DBzstafCvPQpZbgf1IIYyhsJ4B6MSEXDZgIRrjCw2YyieiVuGfI5G99uvw
NNVs1NZK2AWONwXW1MhQs3hFafqyIdqBKwalC1cZiQW_2zNvL71
2Ggi6St0DRenYFYvZbrqDUH_eMNZ8We4wA9u7n1nCUhgALP2mQ1
6CMysOfnjwKc5gggKdpQ8yZZHFQTmzZHWodYDFZNryNOjQX_4xXSq
owIr3cZBri8tFYmVD5MPPKOp8Rp1ngrmvwWTMnpvdlkTEyWkeCmn
LQcZxdywJow83iEaRMAAgb0okwhMRq3KcVy3gfqN4j2SVpnlzA26Uo
8aFGJ0uKF6cd4HgxVnPZCuRx6vxZ2deDkeaLv5NdfKFdmShHHqYpqSz
Kh5WwJyNzEViJzgs0bDv7tH9GJEjjgkRAKIRQSEge_SLSditXSRss2QER
WUp0XB6O36uLgnkSYVHIwz9nZqCJ4rE_chrDGuymKhFPCLfLSgOVd9
85FQDUHzC8GohIpyUTRIMaiRCv9t0dyT37I5bZ6asT6caBhhO3StEDk
NHNhsBHRxboT4Lp3x60P3&f=0&ui=6003062662923id_4e42070adb
bf67d92329417&en=fad_videoplay&a=

3. h"p://www.example.com.ajax.mul.end.ph/end.php?
eid=AQLLhnt40jDTOPvY0l2NCXvgRt6ldoZYIRxTywNr8ywdsU6nUdZT
APTMvXD5cr56WavhJDiacFJlZ5B2rzWIUhchRHwlx_sU7diy0hk8GqAk
CemLYAsrBnFSPNsQuaCeaCUcQ_029eo_1CSvZk0qygVSApdKZ4lqcLR
mCXyPZVkcyUcHve2oVcpsfRVXgoA0PtNGbB08ZerLU6QeddP8fqwIK
UZYdMoHE1VCPFzbfuFYf6jryIswh3O6S55ShTcz16aZEPSNK5aPoQAP
DBzstafCvPQpZbgf1IIYyhsJ4B6MSEXDZgIRrjCw2YyieiVuGfI5G99uvw
NNVs1NZK2AWONwXW1MhQs3hFafqyIdqBKwalC1cZiQW_2zNvL71
2Ggi6St0DRenYFYvZbrqDUH_eMNZ8We4wA9u7n1nCUhgALP2mQ1
6CMysOfnjwKc5gggKdpQ8yZZHFQTmzZHWodYDFZNryNOjQX_4xXSq
owIr3cZBri8tFYmVD5MPPKOp8Rp1ngrmvwWTMnpvdlkTEyWkeCmn
LQcZxdywJow83iEaRMAAgb0okwhMRq3KcVy3gfqN4j2SVpnlzA26Uo
8aFGJ0uKF6cd4HgxVnPZCuRx6vxZ2deDkeaLv5NdfKFdmShHHqYpqSz
Kh5WwJyNzEViJzgs0bDv7tH9GJEjjgkRAKIRQSEge_SLSditXSRss2QER
WUp0XB6O36uLgnkSYVHIwz9nZqCJ4rE_chrDGuymKhFPCLfLSgOVd9
85FQDUHzC8GohIpyUTRIMaiRCv9t0dyT37I5bZ6asT6caBhhO3StEDk
NHNhsBHRxboT4Lp3x60P3&f=0&ui=6003062662923id_4e42070adb
bf67d92329417&en=fad_videoplay&a=

4. h"p://www.example.com.ajax.mul.end.ph/end.php?
eid=AQLLhnt40jDTOPvY0l2NCXvgRt6ldoZYIRxTywNr8ywdsU6nUdZT
APTMvXD5cr56WavhJDiacFJlZ5B2rzWIUhchRHwlx_sU7diy0hk8GqAk
CemLYAsrBnFSPNsQuaCeaCUcQ_029eo_1CSvZk0qygVSApdKZ4lqcLR
mCXyPZVkcyUcHve2oVcpsfRVXgoA0PtNGbB08ZerLU6QeddP8fqwIK
UZYdMoHE1VCPFzbfuFYf6jryIswh3O6S55ShTcz16aZEPSNK5aPoQAP
DBzstafCvPQpZbgf1IIYyhsJ4B6MSEXDZgIRrjCw2YyieiVuGfI5G99uvw
NNVs1NZK2AWONwXW1MhQs3hFafqyIdqBKwalC1cZiQW_2zNvL71
2Ggi6St0DRenYFYvZbrqDUH_eMNZ8We4wA9u7n1nCUhgALP2mQ1
6CMysOfnjwKc5gggKdpQ8yZZHFQTmzZHWodYDFZNryNOjQX_4xXSq
owIr3cZBri8tFYmVD5MPPKOp8Rp1ngrmvwWTMnpvdlkTEyWkeCmn
LQcZxdywJow83iEaRMAAgb0okwhMRq3KcVy3gfqN4j2SVpnlzA26Uo
8aFGJ0uKF6cd4HgxVnPZCuRx6vxZ2deDkeaLv5NdfKFdmShHHqYpqSz
Kh5WwJyNzEViJzgs0bDv7tH9GJEjjgkRAKIRQSEge_SLSditXSRss2QER
WUp0XB6O36uLgnkSYVHIwz9nZqCJ4rE_chrDGuymKhFPCLfLSgOVd9
85FQDUHzC8GohIpyUTRIMaiRCv9t0dyT37I5bZ6asT6caBhhO3StEDk
NHNhsBHRxboT4Lp3x60P3&f=0&ui=6003062662923id_4e42070adb
bf67d92329417&en=fad_videoplay&a=

5. Which is the real one?
• h"p://www.example.com.ajax.mul.end.ph
• h"p://www.example.com/ajax/emu/end.php

6. Threat Models
Emails from ecommerce company à Massive hack
DNS spoof at individual, enterprise or ISP level à Massive hack
Phishing emails à Links / ASachments à Massive hack
1
2
3

7. Hacking may be injurious
to your health

8. Manipula4ng Buetooth enabled defibrillators
• deliver random shocks to a pajent’s heart or
• prevent a medically needed shock from occurring.

9. Remotely manipula4ng drug infusion pumps
• delivering morphine drips, chemotherapy, anjbiojcs
• change the dosage

10. • Reset temperature semngs on refrigerators storing blood
& drugs and cause spoilage.
• Altering digital medical records.
• Restart / reboot crijcal equipment.
• Spoofed blood test reports.

11. The problem
Lack of secure authenjcajon to access
or manipulate the equipment
Weak passwords or default and
hardcoded vendor passwords like
“admin” or “1234”.

12. Hacking a car

13. Hacking cars
• Horn & seat belt
• air-condijoning
• music system / radio
• windshield wipers
• wiper fluid blurring the glass
• accelerator stops working,
• steering wheel
• disabling the brakes
• Track GPS coordinates

16. BMW
Beaujful Malicious Women
Woman in the red dress
VIP’s interview - phone
CEOs interview - pendrive
Harassed employee with iPod
Bangalore source code ther
Trojanized updates from US lady

17. Russian Wife Scam

18. Ashley Madison
Life is short. Have an affair. ®
3 crore users
50,000 from Washington DC

19. Hacking
Ships

20. • 37% of Microsor servers on ships
vulnerable to hacking?
• Patch to exploit in less than 12 hours

21. Real cybera"acks:
• shut down and / or damaged ports, ships,
oil rigs and cargo handling systems.
• taken control of automated machinery,
degraded / destroyed it.
• malware a"ack on 30,000 Saudi Aramco
networked computers.

22. Drug gangs were able to smuggle enjre
container loads of cocaine through
Antwerp, arer its hackers breached the
port’s IT network.

23. Indian Wildlife Crime Control Bureau to hire
cybercrime specialist to catch online wildlife
traffickers
Specialists to handle ‘Web
patrolling’, data analysis
to spot illegal wildlife
trade, create database of
criminals.

24. Cyber Crime
As A Service

26. CCAAS
Cyber Crime As A Service
• Specific hacking sorware
• translajon services
• secure hosjng
• DDoS botnets
• lists of targets for phishing
schemes
• access to crijcal systems
• Custom virus development
Cheapest:
batches of credit card numbers
Darkode was taken down by police
from almost 20 countries.
Sell – Buy – Hire - Outsource

28. Crore rupee apps – remote control tools – bios malware

29. Hacking
Planes ?

30. 1,400 passengers of the Polish airline LOT were
grounded at Warsaw's Chopin airport arer hackers
a"acked the airline ground computer systems used to
issue flight plans.

33. Ruggedized and miniaturized Tacjcal Network Injector (TNI),
TNI would introduce malicious traffic into insecure Wi-Fi networks
Malicious traffic injecjon for targets using open Wi-Fi hotspots

38. Sound

43. Part of child pornography invesjgajons - "tacjcal
detecjon canine" capable of sniffing out hidden
microSD cards used to store videos and photographs.
Tilly sniffs out bed bugs, bodies, some types of cancer
and money.

44. Pin protected?
Switched off?

45. 1. Live Control Panel
2. Stealth Camera
3. Record Phone Surroundings
4. Phone Call Logs
5. SMS Logging
6. Phone Book Access
7. Record Web Acjvity
8. GPS Locajon Tracking
9. Instant Alerts
10. Applicajon Blocking
11. Cell ID Tracking
12. SMS Commands
13. Remote Uninstall

50. TV case

53. The
new age
criminals

57. Star4ng up the Tor browser

59. Searching using hSps://ahmia.fi/search

75. Email: info@asianlaws.org
www.asianlaws.org