WhatsApp Pay may put Indian digital banking at risk: Experts

Agencies
November 8, 2019

After WhatsApp accounts of 121 Indians were compromised by the Israeli spyware Pegasus, experts have warned that the payment feature the Facebook-owned platform is planning to launch in India may put the digital banking system at risk.

"WhatsApp payment needs to be seen with microscopic eye, primarily because in payment you will be dealing with sensitive personal data and cyber security is going to be an essential building block component for WhatsApp to demonstrate its due diligence," Pavan Duggal, one of the nation's top cyber law experts, told IANS.

The Ministry of Electronics and Information Technology (Meity) has already expressed dissatisfaction over the manner WhatsApp communicated about the compromised accounts.

The piece of NSO Group software called Pegasus allegedly exploited WhatsApp's video calling system by installing the spyware via missed calls to snoop on 1,400 users globally. The devices were compromised with just a WhatsApp video call.

In May, WhatsApp, which has 400 million users in India, urged its 1.5 billion global users to upgrade the app after discovering the vulnerability.

"WhatsApp's recent operations have shown that it's difficult for the government to get information from it. WhatsApp is an intermediary under the Information Technology Act and is mandated to exercise due diligence under the law. But it has failed to do due diligence," Duggal said.

"You should not be in a hurry to grant new licences or permission to WhatsApp without being satisfied with its adherence to cyber-security norms, international best practices and Indian laws," he said.

The Facebook-owned company is learnt to have countered the government charge that it didn't inform it about a privacy breach on the messaging platform. WhatsApp didn't even comply with the data breach notification law in India, Duggal said.

"It (WhatsApp) didn't follow reasonable security practices as mandated in Section 43A of the IT Act, 2000. In fact, it abetted the crime of un-authorised access too. Granting WhatsApp pay licence should be given a second thought by the Reserve Bank of India," said Prashant Mali, cyber lawyer at Bombay High Court.

In light of the recent hack, the government, the RBI and the National Payments Corporation of India (NPCI) is reportedly evaluating the risk of allowing social media apps into the digital payment ecosystem.

"With the government, the RBI and the NPCI planning to evaluate the risks involved in making payments via social media apps and services, the security of the UPI payment infrastructure on WhatsApp Pay has been rendered under a cloud of vulnerability," said Salman Waris, Managing Partner at TechLegis Advocates & Solicitors, a law firm.

The RBI revealed in an affidavit in the Supreme Court earlier that WhatsApp had not complied with the data localisation norms. In an April 2018 circular, the RBI stated that the data of any payment banking system have to physically located in India.

"The history of WhatsApp has shown that it's not cooperative with the government in sharing of information. If financial information is compromised, it will not only have an impact on users, but it can also have an impact on the sovereignty and security of India," Duggal said.

The government must go slow till the time WhatsApp demonstrates compliance to Indian law and showed that the platform was secure, he said.

"Because almost every phone user in India is on WhatsApp, it's all the more important for the government and the RBI to ensure that WhatsApp not only complies with the parametres of cyber security and data localisation norms, but also the IT Act and the rules and regulations thereunder.

"If WhatsApp doesn't comply with the data localisation norms, rules and regulations of the IT Act, then there is no question of granting new permission," Duggal said.

In a statement, a WhatsApp spokesperson said that safety and security of users remains the platform's highest priority.

"In May, our security team caught and stopped a cyber attack designed to send malware to mobile devices. Unable to break end-to-end encryption, this kind of malware abuses vulnerabilities within the underlying operating systems that power our mobile phones," the WhatsApp spokesperson said.

"Technology companies are constantly working to stay ahead of these kind of challenges through updates and patches. The safety and security of our users remains our highest priority, which is why in May we blocked the attack and have taken action in the courts to hold NSO accountable," the statement added.

Facebook filed a lawsuit against Israel's NSO Group last month. According to Facebook, the NSO Group violated laws, including the US Computer Fraud and Abuse Act.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
November 17,2024

hizbullah.jpg

An Israeli airstrike on the office of Syria’s Baath party in Lebanon’s capital Beirut has killed the Lebanese resistance movement Hezbollah's Media Relations Officer, Mohammad Afif, reports say.

Lebanon's National News Agency (NNA) reported that the Israeli raid struck the Ba'ath party’s building in central Beirut district of Ras Al-Naba'a on Sunday, adding that the strike was an attempt to assassinate the leader of the resistance media front.

According to Baath Secretary-General Ali Hijazi, Afif was having a meeting in the Baath Party headquarters when Israel carried out the attack.

"Afif did not fight with weapons and did not lead a military unit in Hezbollah. Rather, he led a media unit," he said.

Reuters, Sky News, Al Jazeera and a number of Henrew-language media reported that Afif was killed in the Israeli strike.

However, Hezbollah has not yet confirmed Afif’s death or whether he was present at the site or not.

Earlier, the Lebanese Health Ministry said at least one person was killed and three others injured after an Israeli strike targeted a central district in Beirut.

Lebanon's al-Mayadeen television network reported that five people were killed in the attack.

The latest development came after Afif said Hezbollah was behind the Caesarea operation and targeting Netanyahu’s home during a speech at the Ghobeiry area in the southern suburbs of Beirut on October 22.

This was the second assassination attempt on Afif in the last two months, after he survived an attack on the Hezbollah media relations office several weeks ago.

Israel launched a ground assault and massive air campaign against Lebanon in late September after a year of exchanging fire across the Lebanese border in parallel with the Gaza war.

At least 3,287 people have been killed in Israeli strikes in Lebanon over the past year, with the vast majority in the past seven weeks. Another 14,222 have been wounded, mostly women and children.

In response to the ongoing aggression, the Lebanese resistance movement Hezbollah has been staging hundreds of retaliatory strikes against the occupied Palestinian territories and the Israeli forces trying to advance on southern Lebanese areas.

The movement has vowed to sustain its strikes until the regime ends the escalation.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
November 21,2024

adani.jpg

Shares of Adani Group companies lost about $28 billion in market value in morning trade on Thursday after US prosecutors charged the billionaire chairman of the Indian conglomerate in an alleged bribery and fraud scheme.

Gautam Adani's flagship company Adani Enterprises tumbled 23 per cent, while Adani Ports, Adani Total Gas, Adani Green, Adani Power, Adani Wilmar and Adani Energy Solutions, ACC , Ambuja Cements and NDTV fell between 20 per cent and 90 per cent.

Adani group's 10 listed stocks had a total market capitalisation of about $141 billion at 0534 GMT, compared to $169.08 billion on Tuesday.

US authorities said Adani and seven other defendants, including his nephew Sagar Adani, agreed to pay about $265 million in bribes to Indian government officials to obtain contracts expected to yield $2 billion of profit over 20 years, and develop India's largest solar power plant project.

Adani Green in a statement on Thursday said the US Justice Department had issued a criminal indictment against board members Gautam Adani and Sagar Adani and the Securities and Exchange Commission had issued a civil complaint against them.

The US Justice Department also included Adani Green board member Vneet Jaain in the criminal indictment, it said.

Adani Green's units had decided not to proceed with the proposed US dollar denominated bond offerings due to developments, it added.

"Investors will shy away from Adani Group stocks ... and that's what this sharp selling is signifying," said Saurabh Jain, assistant vice president of retail equities research at SMC Global Securities.

"This could hurt the credibility of the group and maybe borrowing costs will rise," he said.

The indictment comes nearly two years after US shortseller Hindenburg Research alleged that Adani had improperly used tax havens and was involved in stock manipulation, allegations the conglomerate denied.

Also in early Asian trading on Thursday, Adani dollar bonds slumped, with prices down 3c-5c on bonds for Adani Ports and Special Economic Zone. The falls were the largest since the Adani Group came under a short-seller attack in February 2023.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.
News Network
November 14,2024

kidnap.jpg

The UN special rapporteur for Palestine has slammed Israel’s parliament for passing a law authorizing the detention of Palestinian children, who are “tormented often beyond the breaking point” in Israeli custody.

Francesca Albanese, the UN special rapporteur on the rights situation in the Occupied Palestinian Territory, in a Thursday post on X, characterized the experiences of Palestinian minors in Israeli detention as extreme and often inhumane.

The UN expert highlighted the grave impact of this policy, noting that up to 700 Palestinian minors are taken into custody each year, a practice she described as part of an unlawful occupation that views these children as potential threats.

Albanese said Palestinian minors in Israeli custody are “tormented often beyond the breaking point” and that “generations of Palestinians will carry the scars and trauma from the Israeli mass incarceration system.”

She further criticized the international community for its inaction, suggesting that ongoing diplomatic efforts, which often rely on the idea of resuming negotiations for peace, have contributed to normalizing such human rights violations against Palestinian children and the broader population.

The comments by Albanese came in response to Israel’s parliament (Knesset) passing a law on November 7 that authorizes the detention of Palestinian children under the age of 14 for “terrorism or terrorist activities.”

Under the legislation, a temporary five-year measure, once the individuals turn 14, they will be transferred to adult prison to continue serving their sentences.

Additionally, the law allows for a three-year clause that enables courts to incarcerate minors in adult prisons for up to 10 days if they are considered dangerous. Courts have the authority to extend this duration if necessary, according to the Knesset.

The legislation underscores a shift in the treatment of minors and raises alarms among human rights advocates regarding the legal and ethical ramifications of detaining children and the conditions under which they may be held.

Thousands of Palestinians, including hundreds of children and women, are currently in Israeli jails—around one-third without charge or trial. Also, an unknown number are arbitrarily held following a wave of arrests in the wake of the regime's genocidal war on Gaza.

Since the onset of the Gaza war, the Israeli regime, under the supervision of extremist minister Itamar Ben-Gvir, has turned prisons and detention centers into “death chambers,” the ministry of detainees and ex-detainees’ affairs in Gaza says.

Violence, extreme hunger, humiliation, and other forms of abuse of Palestinian prisoners have been normalized across Israel’s jail system, reports indicate.

Over 270 Palestinian minors are being detained by Israeli authorities, in violation of UN resolutions and international treaties that forbid the incarceration of children, as reported by Palestinian rights organizations.

Comments

Add new comment

  • Coastaldigest.com reserves the right to delete or block any comments.
  • Coastaldigset.com is not responsible for its readers’ comments.
  • Comments that are abusive, incendiary or irrelevant are strictly prohibited.
  • Please use a genuine email ID and provide your name to avoid reject.