Skip to main content

The Growing Threat: Cyberwarfare in the Shadows of Indo-Pak Tensions

 

‘Hillary can’t dance anymore’.

The recent Indo-Pak aggression sparked a widespread discussion about the ‘Dance of The Hillary’ malware and the adversary's attempt at cyber warfare.

 

Understanding Cyberwarfare

Cyberwarfare can be an effort undertaken by an enemy state using cyberspace to attack vital computer systems and disrupt information systems, networks, and online working in that state. Cyberwarfare is a new type of war that bolsters the position of the forward participant in the race of cyberspace and technology. Cyberwarfare has become the latest trend while fighting wars, as almost everything is present and dependent on the internet. Regardless of how physically strong a person may be, everyone is vulnerable on the internet—whether it's their data, financial information, or any other digital asset that could become a target for Cyber Extortion.

As soon as the tussle between India and Pakistan began on May 8th, speculations about a cyberattack being launched by Pakistan also started to surface. This incident demonstrated how formidable cyberwarfare can be.

 

Subterfuge To Panic

The tsunami around Pakistan led to a cyber threat initiated with a WhatsApp message, which included manipulative language, heightened claims and a risk of pertinent threat or doom; it said that the malware was targeting WhatsApp, Facebook and E-mails to steal your banking details, passwords and would give access of your device to the enemy. This message, drafted with such technical words, sounded genuine to a prudent person, even professionals, but was nothing short of an attempt at subterfuge, as confirmed by the Press Information Bureau upon fact-checking. It was found that this malware news was only spread to spawn trepidation among anyone who received it.

Interestingly, this Dance of the Hillary malware isn't new. It has been around since 2011 and made headlines in 2016-2017, clearly meaning that its resurfacing was a clear attempt to create panic.

 

Indispensable Cyber Hygiene

The difference between spreading misinformation about a malware infection and launching an actual malware attack is Capability; while the adversary might not have been capable enough, general cyber awareness is essential in case a computer network faces a cyberattack.

  • Do not open any attachments sent to E-mail, SMS, WhatsApp, or any social media from an unknown account. It can be a PDF, a video file, or any extension asking the person to install something. 
  • Many apps have an auto-download feature, which, although convenient, can cause a computer system to fall prey to a cyberattack.
  •  Cyberattacks commonly use phishing, smishing, and vishing to hack a computer system. If you receive any unknown communication, report it on https://sancharsaathi.gov.in
  • A widely believed misconception is that regularly updating your software slows down the speed of the operating system. While it only amounts to inculcating new features in your device, updates also tend to overhaul security bugs present in a device, restricting possible entry for malware.
  • Enable Two Factor Authentication. 
  • A widely believed misconception is that regularly updating your software slows down the speed of the operating system. While it only amounts to inculcating new features in your device, updates also tend to overhaul security bugs present in a device, restricting possible entry for malware.
________________________________________________
~ Purav Garg
Research Associate, WCSF
B.Com LLB (H), UILS, Chandigarh








Comments

Popular posts from this blog

India's Cybersecurity Landscape: New Rules, Rising Threats, and Government Response

The recent interaction of the newly reappointed Union IT Minister with journalists has sparked significant interest within the IT Industry and among privacy enthusiasts. Ashwini Vaishnaw announced on June 15 that the MEITY will soon release the rules under the Digital Personal Data Protection (DPDP) Act, a development of immense significance for India's cybersecurity landscape. [1] 's Acts. It holds immense significance for the country, especially with the increasing number of internet users.  Of 2023 for public consultation. The rules hold immense significance for a country like India, with 751.5 million internet users at the commencement of 2024 [2] . With the continuous surge in internet usage across India, the volume of personal data shared online is also on the rise. This occurs either voluntarily, such as an individual providing personal information to a social media platform to access its services, or involuntarily, as a consequence of falling victim to a cybercrime inci...

UNESCO Guidelines on Generative AI in Schools

The advent of artificial intelligence has assumed prominence amongst all industries and various facets of people's personal lives. The integration of AI in education has been inevitable, given the significance and role of information, knowledge production and administration in the sector. This is especially so as its capabilities entail replicating higher-order thinking. Besides assisting in the education process, it also brings the element of real-life relevance, allowing education to be imparted against the backdrop of the evolving world due to the same AI. It tends to have implications on the subject matter that needs to be imparted, which tends to be something that constantly needs to answer the question of "Why and how is this particular subject matter relevant for learning?".  This induces policy-makers and educational institutions to rethink what they need to impart as knowledge, the area of matter, and the manner of thinking to be emphasised. This is because educa...

International Data Transfers under GDPR

One goal of the General Data Protection Regulation (GDPR) is to facilitate the free movement of personal data among member states under shared data protection principles. However, the Regulation also acknowledges that transferring personal data to non-member countries demands special attention. Chapter V of GDPR specifically talks about the transfers of personal data to third countries only when:- The third country must ensure an adequate level of protection for personal data as determined by the European Commission. If such protection is not in place, the data controller or processor must provide appropriate safeguards, ensuring enforceable rights and effective legal remedies for data subjects. Alternatively, if neither adequate protection nor appropriate safeguards are present, the transfer of personal data must fall within one of the specific derogations outlined in the Regulation. To better understand the concept of International Data Transfer, we first need to understand what the ...