#FactCheck - Viral Video Falsely Linked to Netanyahu’s Brother’s Death, Old Funeral Clip Misused

Introduction 

As various technological developments enable our phones to take on a greater role, these devices, along with the applications they host, also become susceptible to greater risks. Recently, Zimperium, a tech company that provides security services for mobiles and applications from threats like malware, phishing, etc., has announced its identification of a malware that is targeted toward stealing information from Indian Banks. The Indian Express reports that data from over 25 million devices has been exfiltrated, making it increasingly dangerous, just going by the it has affected so far.

Understanding the Threat: The Case of FatBoyPanel 

A malware is a malicious software that is a file or a program, intentionally harmful to a network, server, computer, and other devices. It is also of various types; however, in the context of the aforementioned case, it is a Trojan horse i.e., a file/program designed to trick the victim into assuming it to be a legitimate software program that is trying to gain access. They are able to execute malicious functions on a device as soon as they are activated post-installation. 

The FatBoyPanel, as it is called, is a malware management system that carried out a massive cyberattack, targeting Indian mobile users and their bank details. Their modus operandi included the process of social engineering, wherein attackers posed as bank officials who called their target and warned them that if no immediate action was taken to update their bank details, their account would be suspended immediately. On panicking and asking for instructions, they were told to download a banking application from the link sent in the form of an Android Package Kit (APK) file (that requires one to enable “Install from Unknown Sources” ) and install it. Various versions of similar incidents were acted on by other attackers, all to trick the target into downloading the file sent. The apps sent through the links are fake, and once installed, they immediately ask for critical permissions such as access to contacts, device storage, overlay permissions (to show fake login pages over real apps), and access to SMS messages (to steal OTPs and banking alerts). This aids in capturing text messages (especially OTPs related to banks), read stored files, monitor app usage, etc. This data is stolen and then sent to the FatBoyPanel backend, where hackers are able to see real-time data on their dashboard, which they can further download and sell.  FatBoyPanel is a C&C (command and control) server that acts as a centralised control room.

Protecting Yourself: Essential Precautions in the Digital Realm 

Although there are various other types of malware, how one must deal with them remains the same. Following are a few instructions that one can practice in order to stay safe:

• Be cautious with app downloads: Only download apps from official app stores (Google Play Store, Apple App Store). Even then, check the developer's reputation, app permissions, and user reviews before installing.
• Keep your operating system and apps updated: Updates often include security patches that protect against known vulnerabilities.
• Be wary of suspicious links and attachments: Avoid clicking on links or opening attachments in unsolicited emails, SMS messages, or social media posts. Verify the sender's authenticity before interacting.
• Enable multi-factor authentication (MFA) wherever possible: While malware like FatBoyPanel can sometimes bypass OTP-based MFA, it still adds an extra layer of security against many other threats. 
• Use strong and unique passwords: Employ a combination of uppercase and lowercase letters, numbers, and symbols for all your online accounts. Avoid reusing passwords across different platforms.
• Install and maintain a reputable mobile security app: These apps can help detect and remove malware, as well as warn you about malicious websites and links (Bitdefender, etc.)
• Regularly review app permissions and give access judiciously: Check what permissions your installed apps have and revoke any that seem unnecessary or excessive. 
• Educate yourself and stay informed: Keep up-to-date with the latest cybersecurity threats and best practices.

Conclusion 

The emergence of malware management systems indicates just how sophisticated the attackers have become over the years. Vigilance at the level of the general public is recommended, but so are increasing efforts in awareness regarding such methods of crime, as people continue to remain vulnerable in aspects related to cybersecurity. Sensitive information at stake, we must take steps to sensitise and better prepare the public to deal with the growing landscape of the digital world.

References

• https://zimperium.com/blog/mobile-indian-cyber-heist-fatboypanel-and-his-massive-data-breach
• https://indianexpress.com/article/technology/tech-news-technology/fatboypanel-new-malware-targeting-indian-users-what-is-it-9965305/ 
• https://www.techtarget.com/searchsecurity/definition/malware 

‍

Introduction

The digital realm is evolving at a rapid pace, revolutionising cyberspace at a breakneck speed. However, this dynamic growth has left several operational and regulatory lacunae in the fabric of cyberspace, which are exploited by cybercriminals for their ulterior motives. One of the threats that emerged rapidly in 2024 is proxyjacking, in which vulnerable systems are exploited by cyber criminals to sell their bandwidth to third-party proxy servers. This cyber threat poses a significant threat to organisations and individual servers. 

Proxyjacking is a kind of cyber attack that leverages legit bandwidth sharing services such as Peer2Profit and HoneyGain. These are legitimate platforms but proxyjacking occurs when such services are exploited without user consent. These services provide the opportunity to monetize their surplus internet bandwidth by sharing with other users. The model itself is harmless but provides an avenue for numerous cyber hostilities.  The participants install net-sharing software and add the participating system to the proxy network, enabling users to route their traffic through the system. This setup intends to enhance privacy and provide access to geo-locked content. 

The Modus Operandi

These systems are hijacked by cybercriminals, who sell the bandwidth of infected devices. This is achieved by establishing Secure Shell (SSH) connections to vulnerable servers. While hackers rarely use honeypots to render elaborate scams, the technical possibility of them doing so cannot be discounted. Cowrie Honeypots, for instance, are engineered to emulate UNIX systems. Attackers can use similar tactics to gain unauthorized access to poorly secured systems. Once inside the system, attackers utilise legit tools such as public docker images to take over proxy monetization services. These tools are undetectable to anti-malware software due to being genuine software in and of themselves. Endpoint detection and response (EDR) tools also struggle with the same threats.

The Major Challenges 

Limitation Of Current Safeguards – current malware detection software is unable to distinguish between malicious and genuine use of bandwidth services, as the nature of the attack is not inherently malicious. 

Bigger Threat Than Crypto-Jacking – Proxyjacking poses a bigger threat than cryptojacking, where systems are compromised to mine crypto-currency. Proxyjacking uses minimal system resources rendering it more challenging to identify. As such, proxyjacking offers perpetrators a higher degree of stealth because it is a resource-light technique, whereas cryptojacking can leave CPU and GPU usage footprints.

Role of Technology in the Fight Against Proxyjacking

Advanced Safety Measures- Implementing advanced safety measures is crucial in combating proxyjacking. Network monitoring tools can help detect unusual traffic patterns indicative of proxyjacking. Key-based authentication for SSH can significantly reduce the risk of unauthorized access, ensuring that only trusted devices can establish connections. Intrusion Detection Systems and Intrusion Prevention Systems can go a long way towards monitoring unusual outbound traffic.

Robust Verification Processes- sharing services must adopt robust verification processes to ensure that only legitimate users are sharing bandwidth. This could include stricter identity verification methods and continuous monitoring of user activities to identify and block suspicious behaviour. 

Policy Recommendations

Verification for Bandwidth Sharing Services – Mandatory verification standards should be enforced for bandwidth-sharing services, including stringent Know Your Customer (KYC) protocols to verify the identity of users. A strong regulatory body would ensure proper compliance with verification standards and impose penalties. The transparency reports must document the user base, verification processes and incidents. 

Robust SSH Security Protocols – Key-based authentication for SSH across organisations should be mandated, to neutralize the risk of brute force attacks. Mandatory security audits of SSH configuration within organisations to ensure best practices are complied with and vulnerabilities are identified will help. Detailed logging of SSH attempts will streamline the process of identification and investigation of suspicious behaviour. 

Effective Anomaly Detection System – Design a standard anomaly detection system to monitor networks. The industry-wide detection system should focus on detecting inconsistencies in traffic patterns indicating proxy-jacking. Establishing mandatory protocols for incident reporting to centralised authority should be implemented. The system should incorporate machine learning in order to stay abreast with evolving attack methodologies.

Framework for Incident Response – A national framework should include guidelines for investigation, response and remediation to be followed by organisations. A centralized database can be used for logging and tracking all proxy hacking incidents, allowing for information sharing on a real-time basis. This mechanism will aid in identifying emerging trends and common attack vectors. 

Whistleblower Incentives – Enacting whistleblower protection laws will ensure the proper safety of individuals reporting proxyjacking activities. Monetary rewards provide extra incentives and motivate individuals to join whistleblowing programs. To provide further protection to whistleblowers, secure communication channels can be established which will ensure full anonymity to individuals. 

Conclusion

Proxyjacking represents an insidious and complicated threat in cyberspace. By exploiting legitimate bandwidth-sharing services, cybercriminals can profit while remaining entirely anonymous. Addressing this issue requires a multifaceted approach, including advanced anomaly detection systems, effective verification systems, and comprehensive incident response frameworks. These measures of strong cyber awareness among netizens will ensure a healthy and robust cyberspace. 

References 

• https://gridinsoft.com/blogs/what-is-proxyjacking/
• https://www.darkreading.com/cyber-risk/ssh-servers-hit-in-proxyjacking-cyberattacks
• https://therecord.media/hackers-use-log4j-in-proxyjacking-scheme

‍

Introduction
‍

One of the biggest gaming populations in the world today is found in India. Every day, hundreds of millions of young Indians engage with streaming services, immersive digital content, mobile games and e-sports ecosystems. Yet, despite this massive scale of participation, India remains largely absent from the global conversation on original gaming intellectual property. Although the nation produces very few globally significant gaming worlds of its own, it consumes games on an astonishing scale. This paradox highlights a more serious structural issue with the gaming discourse in India. Our national conversation around gaming often begins and ends with regulation i.e., online betting, taxation, fantasy gaming legality, addiction and compliance. Although these worries are valid they have inadvertently obscured a much more crucial query: is India creating a gaming industry or is it just regulating a gaming market? Various subject-matter experts have expressed their views on this issue, like Shailendra Vikram Singh Former Deputy Secretary (Cyber & Information Security), Ministry of Home Affairs who is of the opinion, 

“I believe India’s gaming story presents a unique paradox. While we are one of the world’s largest gaming markets, we have yet to fully realize gaming’s potential as a strategic pillar of the AVGC vision. Much of the conversation remains focused on regulation and consumption, whereas the larger opportunity lies in creation, innovation, and global competitiveness.

In my view, gaming should be recognized as a strategic creative and digital industry. It has the potential to generate high-value employment, foster indigenous intellectual property, and strengthen capabilities in design, storytelling, animation, immersive technologies, and emerging digital skills. Beyond its economic value, gaming can also serve as a powerful platform for education, skilling, and public engagement.

I also see gaming as an important medium for bringing India’s rich cultural heritage, historical narratives, and diverse traditions to global audiences through interactive storytelling. As digital experiences increasingly shape how younger generations learn, engage, and understand the world, culturally rooted content can become a source of both creative expression and national soft power.

At the same time, sustainable growth must be built on trust. Strong safeguards for cybersecurity, child protection, user safety, responsible gaming, and data governance are essential to creating a resilient and trusted ecosystem.

To realize the full promise of the AVGC vision, I believe India must aspire to be more than a large gaming market. A nation of gamers must ultimately become a nation of game creators.”

‍

The Misplaced Focus of Regulating Bodies

 
A country with one of the world’s oldest storytelling civilizations should not remain from the world’s most influential storytelling medium. Examining how other nations viewed gaming as a strategic cultural enterprise highlights the disparity even further. Japan turned gaming into a tool of soft power by exporting global icons like Mario,  Pokémon and Zelda. Along with K-pop and digital culture, South Korea incorporated gaming into its larger cultural export sector. With businesses like Tencent and games like Genshin Impact and Black Myth: Wukong, China is now aggressively marketing gaming as a geopolitical and technological impact ecosystem.  

Through The Witcher, Poland even showed how local folklore based storytelling may achieve cultural relevance on a worldwide scale. In contrast, India contributes very little to the global gaming imagination despite having one of the strongest civilisational storytelling traditions in human history, including the Mahabharata, Ramayana, Buddhist Narratives, tribal folklore, Indic mythology and regional legends.  

‍

Artificial Intelligence and Lore of Lost Opportunities

‍
The arrival of artificial intelligence now changes this equation dramatically. AI is lowering the barriers to creativity in ways previously unimaginable. For character design, procedural storytelling, localisation, environment creation, NPC interactions, voice synthesis and animation pipelines, independent producers and small studios can now use generative AI. Agile creative ecosystems are increasingly able to accomplish what formerly required enormous infrastructure and production teams. This offers India a once-in-a-lifetime chance to overcome conventional developmental barriers in the gaming sector. India may become a global center for AI-assisted storytelling, culturally grounded gaming storylines and scalable independent game production instead of competing just through capital-intensive AAA ecosystems. 

The AVGC Promotion Task Force for India’s Digital future explicitly highlighted the significance of intellectual property development, academic integration, skilling and incubation systems. However, India still views gaming more as a compliance industry than as a significant creative economy. Economists use revenue forecasts to discuss gaming. Taxation frameworks are used by policymakers to discuss it. However, narrative ownership, digital culture, creative sovereignty and gaming as a long-term civilisational export are not sufficiently discussed. 

‍

Playing Everyone Else’s Game

‍
The actual danger does not lie in the fact India won’t grow into a sizable gaming industry. The change has already taken place. The bigger risk is that, in a global market that is becoming more and more controlled by foreign narratives, foreign engines and foreign platforms, India may permanently remain a consumer ecosystem. Processors and graphic engines won’t be the only factors influencing gaming in the future, cultures that can emotionally engage worlds will also play a significant role. India possesses the depth of civilisation, creative heritage, technical prowess and population size necessary to develop into such a creator economy. It does not, however, have a consistent institutional focus on supporting studios, storytellers, animators and original intellectual property ecosystems. 

‍

References

‍

1. AVGC Promotion Task Force Report, Government of India
2. KPMG India Media & Entertainment Reports
3. EY-FICCI Media & Entertainment Industry Reports
4. Newzoo Global Games Market Reports
5. Lumikai “State of India Gaming” Reports
6. UNESCO Reports on Cultural & Creative Industries
7. World Economic Forum reports on AI and Creative Economies

‍