Current Affairs

Sign in
Science and TechnologyGS3
GS3

Real estate firm loses crores in targeted whale phishing attack

Source:Indian Express ↗

Why It Matters

Cybercrimes, especially targeted phishing attacks like whaling, represent a significant internal security and economic threat. It is crucial for UPSC aspirants to understand the evolving nature of cyber threats, social engineering tactics, and the preventive security frameworks required at the organizational and national levels.

Summary

A real estate firm based in Pune lost Rs 1.95 crore over two days due to a targeted cyberattack known as 'whale phishing.' In such attacks, cybercriminals typically spoof the email addresses or digital identities of top executives (the 'whales') to manipulate employees into transferring large sums of money. The incident draws attention to the escalating threat of sophisticated social engineering and business email compromise (BEC) attacks, emphasizing the urgent need for enhanced corporate cybersecurity measures, strict verification protocols for financial transactions, and improved digital literacy among employees to combat modern cybercrimes.

Key Points

  • A real estate firm in Pune fell victim to a sophisticated cyber fraud, losing Rs 1.95 crore over a span of two days.
  • The attack was identified as 'whale phishing' (whaling), a highly targeted form of spear-phishing aimed at senior executives or using their spoofed identities to authorize fraudulent financial transactions.
  • This incident highlights the severe financial risks posed by social engineering and business email compromise (BEC) attacks to corporate entities.
  • It underscores the critical need for robust cybersecurity frameworks, multi-factor authentication for financial transfers, and continuous employee awareness programs.
Linked PYQs · 3

Linked PYQs · 3

  • 2020MainsGS3

    Discuss different types of cyber crimes and measures required to be taken to fight the menace.

  • 2017MainsGS3

    Discuss the potential threats of Cyber attack and the security framework to prevent it.

  • 2018PrelimsGS1

    The terms 'WannaCry, Petya and EternalBlue' sometimes mentioned in the news recently are related to