WhatsApp Pay may put Indian digital banking at risk: Experts

Agencies
November 8, 2019

After WhatsApp accounts of 121 Indians were compromised by the Israeli spyware Pegasus, experts have warned that the payment feature the Facebook-owned platform is planning to launch in India may put the digital banking system at risk.

"WhatsApp payment needs to be seen with microscopic eye, primarily because in payment you will be dealing with sensitive personal data and cyber security is going to be an essential building block component for WhatsApp to demonstrate its due diligence," Pavan Duggal, one of the nation's top cyber law experts, told IANS.

The Ministry of Electronics and Information Technology (Meity) has already expressed dissatisfaction over the manner WhatsApp communicated about the compromised accounts.

The piece of NSO Group software called Pegasus allegedly exploited WhatsApp's video calling system by installing the spyware via missed calls to snoop on 1,400 users globally. The devices were compromised with just a WhatsApp video call.

In May, WhatsApp, which has 400 million users in India, urged its 1.5 billion global users to upgrade the app after discovering the vulnerability.

"WhatsApp's recent operations have shown that it's difficult for the government to get information from it. WhatsApp is an intermediary under the Information Technology Act and is mandated to exercise due diligence under the law. But it has failed to do due diligence," Duggal said.

"You should not be in a hurry to grant new licences or permission to WhatsApp without being satisfied with its adherence to cyber-security norms, international best practices and Indian laws," he said.

The Facebook-owned company is learnt to have countered the government charge that it didn't inform it about a privacy breach on the messaging platform. WhatsApp didn't even comply with the data breach notification law in India, Duggal said.

"It (WhatsApp) didn't follow reasonable security practices as mandated in Section 43A of the IT Act, 2000. In fact, it abetted the crime of un-authorised access too. Granting WhatsApp pay licence should be given a second thought by the Reserve Bank of India," said Prashant Mali, cyber lawyer at Bombay High Court.

In light of the recent hack, the government, the RBI and the National Payments Corporation of India (NPCI) is reportedly evaluating the risk of allowing social media apps into the digital payment ecosystem.

"With the government, the RBI and the NPCI planning to evaluate the risks involved in making payments via social media apps and services, the security of the UPI payment infrastructure on WhatsApp Pay has been rendered under a cloud of vulnerability," said Salman Waris, Managing Partner at TechLegis Advocates & Solicitors, a law firm.

The RBI revealed in an affidavit in the Supreme Court earlier that WhatsApp had not complied with the data localisation norms. In an April 2018 circular, the RBI stated that the data of any payment banking system have to physically located in India.

"The history of WhatsApp has shown that it's not cooperative with the government in sharing of information. If financial information is compromised, it will not only have an impact on users, but it can also have an impact on the sovereignty and security of India," Duggal said.

The government must go slow till the time WhatsApp demonstrates compliance to Indian law and showed that the platform was secure, he said.

"Because almost every phone user in India is on WhatsApp, it's all the more important for the government and the RBI to ensure that WhatsApp not only complies with the parametres of cyber security and data localisation norms, but also the IT Act and the rules and regulations thereunder.

"If WhatsApp doesn't comply with the data localisation norms, rules and regulations of the IT Act, then there is no question of granting new permission," Duggal said.

In a statement, a WhatsApp spokesperson said that safety and security of users remains the platform's highest priority.

"In May, our security team caught and stopped a cyber attack designed to send malware to mobile devices. Unable to break end-to-end encryption, this kind of malware abuses vulnerabilities within the underlying operating systems that power our mobile phones," the WhatsApp spokesperson said.

"Technology companies are constantly working to stay ahead of these kind of challenges through updates and patches. The safety and security of our users remains our highest priority, which is why in May we blocked the attack and have taken action in the courts to hold NSO accountable," the statement added.

Facebook filed a lawsuit against Israel's NSO Group last month. According to Facebook, the NSO Group violated laws, including the US Computer Fraud and Abuse Act.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
May 4,2024

canadaindia.jpg

Canadian Police said they have arrested three Indians they suspect were part of the alleged hit squad that had killed Hardeep Singh Nijjar, a Sikh separatist leader involved with the Khalistan movement, which calls for an independent Sikh state.

Nijjar's killing had become the epicentre of a diplomatic row between India and Canada last year after Prime Minister Justin Trudeau alleged the role of "Indian agents" in the murder. India had rejected the charge as "absurd" and "motivated".

The three arrested Indians - Karan Brar, 22, Kamalpreet Singh, 22, Karanpreet Singh, 28 - were living as non-permanent residents in Alberta for three to five years, said Superintendent Mandeep Mooker, who leads the Integrated Homicide Investigation Team. The police have also released their photos.

They have been charged with first-degree murder and conspiracy to commit murder, showed court documents.

Police said that none of the suspects were known to them earlier and they were investigating their possible ties to the Indian government.

The murder remains "very much under active investigation," Royal Canadian Mounted Police (RCMP) Assistant Commissioner David Teboul told a press conference on Friday.

"There are separate and distinct investigations ongoing into these matters, certainly not limited to the involvement of the people arrested today, and these efforts include investigating connections to the government of India," CTV News quoted him as saying.

Nijjar, a Canadian citizen who was wanted in India on various terror charges, was shot dead outside a gurdwara in Surrey on June 18, 2023. Trudeau's charge against India sparked a massive row later that year with both countries expelling diplomats of the other country.

A fresh row erupted earlier this week after separatist slogans on 'Khalistan' were raised at an event addressed by Trudeau, prompting New Delhi to summon their Deputy High Commissioner and lodge a strong protest.

On the sidelines of the event, Trudeau told reporters that Nijjar's killing had created a "problem" that he could not have ignored.

India rejected his comment and said it once again showed Canada provides political space given to separatism, extremism, and violence. "This not only impacts India-Canada relations but also encourages a climate of violence and criminality in Canada to the detriment of its own citizens," foreign ministry spokesperson Randhir Jaiswal said.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
May 12,2024

gazaground.jpg

Israeli military tanks have started to go deeper into the Jabalia refugee camp in northern Gaza as part of a ground offensive months after claiming Hamas had been “dismantled” in the area.

Israeli forces are “carpet-bombing” the eastern areas of Jabalia refugee camp in the northern Gaza Strip, killing and wounding several Palestinians, Al-Jazeara reported citing local sources on Sunday.

Israeli military tanks have advanced further into the Jabalia refugee camp, crossing Salah al-Din Street amidst ongoing battles with Hamas fighters, reports added.

Media quoted eyewitnesses as saying that the tanks are surrounding evacuation centers and residential buildings in the densely populated area, leading to mass evacuations and displacement towards the western part of Gaza City.

Also, Israeli drones targeted ambulances near the clinic run by the United Nations Relief and Works Agency for Palestine Refugees (UNRWA) in Jabalia, according to Mahmoud Basal, the spokesperson for the civil defense directorate in Gaza.

Basal stated that emergency crews in Rafah, al-Zaytounm, al-Sabra, and Jabalia have been inundated with distress calls, confirming that these areas were subjected to overnight bombardment.

Shortage of oxygen for patients

Imad Abu Zayda, an emergency doctor in Jabalia, warned of the critical conditions prevailing there due to the recent Israeli aggression in the area.  

“No light due to the lack of fuel and there’s no medical supplement available as Israel has expanded their operation in the area. We have no oxygen to give to patients,” he said.

He added that the majority of those injured are children and women, and the medical team is grappling with limited resources to provide essential care.

All hospitals in the northern Gaza Strip are now out of service, following a warning from the UN about the risk of running out of fuel in hospitals across the region.

Israel’s closure of the Rafah crossing has also prevented aid trucks from entering the area since May 5.

The Jabalia refugee camp, established in 1948 to accommodate Palestinians who were displaced after the Nakba, or catastrophe, which refers to the ethnic cleansing of Palestine in 1948, has become the most densely populated refugee camp in the Gaza Strip.

With over 750,000 Palestinians forcefully displaced, this camp stands as a testament to the birth of Israel in 1948.

Since the start of the Israeli war on the Gaza Strip on October 7, Israeli forces carried out several attacks on Jabilia camp, leaving it in ruins by intense bombardment.

In early February, Israeli forces withdrew from the camp claiming it had destroyed Hamas as a fighting force in the northern areas.

On Saturday, the Israeli military ordered residents of the Jabalia Refugee Camp to evacuate “immediately”, as it prepares to launch military operations against Hamas.

However, the displaced residents have no place to seek refuge, as the UN reports a severe famine in the region.

Since the start of the offensive, the Tel Aviv regime has killed more than 34,971 Palestinians and injured more than 78,641 others, mostly women and children.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
May 8,2024

sampitroda.jpg

Congress leader Sam Pitroda has stepped down from the post of Chairman of the Indian Overseas Congress and his resignation was accepted by the party. Congress leader Jairam Ramesh took to X and announced that Sam Pitroda had decided to resign from the key post "of his own accord".

Pitroda had been under fire over his controversial remark that Indians in the East resemble the Chinese while those in the South look like Africans.

"We could hold together a country as diverse as India -- where people on East look like Chinese, people on West look like Arab, people on North look like maybe White and people in South look like Africans. It doesn't matter. We are all brothers and sisters," Pitroda said during an interview with The Statesman.

The Congress immediately distanced itself from Pitroda's remarks, terming them "unacceptable".

"The analogies drawn by Mr Sam Pitroda in a podcast to illustrate India's diversity are most unfortunate and unacceptable. The Indian National Congress completely dissociates itself from these analogies," Jairam Ramesh said in a post on X.

The BJP also hit out at the Congress over Pitroda's remarks and termed them "racist and divisive".

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.