McAfee Mobile Threat Report Unveils 550% Increase in Consumer Security Risks in Second Half of 2018

Today McAfee announced its extended relationships with Samsung and Turk Telekom to further protect what matters by expanding its presence in the consumer cybersecurity industry. McAfee is committed to expanding these partnerships to champion security that is built-in across devices and networks, as it is crucial that the entire ecosystem works together to protect consumers from attacks. McAfee also unveiled its latest Mobile Threat Report, reporting backdoors, malicious cryptomining, fake apps and banking Trojans all increased substantially in 2018, propelled by cybercriminals quest for illicit profits. Most notably, the number of fake app detections by McAfee’s Global Threat Intelligence increased from around 10,000 in June 2018 to nearly 65,000 in December 2018.

According to McAfee Labs 2019 predictions, cybercriminals are looking for ways to use trusted devices to gain control of Internet of Things (IoT) devices via password cracking and exploiting other vulnerabilities, such as through the exploitation via voice assistants. With over 25 million voice assistants in use across the world, these devices are often connected to other things in the home- controlling lights, thermostats, door locks and more. More devices mean greater connectivity and convenience for their owners, but connectivity also means more opportunities for malicious deeds.

“Most IoT devices are being compromised by exploiting rudimentary vulnerabilities, such as easily guessable passwords and insecure default settings” said Raj Samani, McAfee fellow and chief scientist at McAfee. “From building botnets, to stealing banking credentials, perpetrating click fraud, or threatening reputation damage unless a ransom is paid, money is the ultimate goal for criminals.”

“The rapid growth and broad access to connected IoT devices push us to deliver innovations with our partners that go beyond traditional AV, and we are creating solutions that address real world digital security challenges,” said Gary Davis, chief consumer security evangelist at McAfee. “From securing the gaming experience to safeguarding the connected home to protecting against cryptojacking, we are enabling our customers to protect what matters most to them.”

McAfee and Samsung Extend Partnership to Secure Galaxy S10 Smartphones

For the fifth year, Samsung and McAfee have worked to protect what matters for consumers around the world. McAfee extended its long-standing partnership with Samsung to safeguard consumers from cybersecurity threats on Samsung Galaxy S10 smartphones which come pre-installed with anti-malware protection powered by McAfee VirusScan. It will also support Samsung Secure Wi-Fi service that McAfee provided backend infrastructure to protect consumers against risky Wi-Fi. In addition to mobile, the partnership expands to better protect Samsung smart TVs, as well as PCs and laptops.

Türk Telekom and McAfee Offer Customers Digital Parenting Solution to Protect Families Online

McAfee strengthened its partnership with Türk Telekom, the leading information and communication technologies company in Turkey, to provide a security solution to help parents protect their family’s digital lives. Powered by McAfee’s Safe Family, fixed and mobile broadband customers will have the option to benefit from robust parental controls that will help provide parents with the confidence they need to better manage their children’s online experience.

“As the threat landscape continues to evolve in both speed and sophistication, we understand that consumers can feel at a loss when navigating the online security space. That’s why we are working diligently with our partners to create solutions for more than half a billion customers to address real world digital security challenges. From safeguarding the connected home to protecting against contemporary attacks such as cryptojacking, we’re enabling our customers to protect what matters to them by delivering the peace of mind needed to connect with confidence. Our partners share our belief that security must be built in from the start and prioritized to canvass all devices and networks,” said Terry Hicks, McAfee’s executive vice president, consumer business group.

McAfee’s Mobile Threat Report 2019

McAfee’s Mobile Threat Report 2019 reveals that while 2018 was the year of mobile malware, 2019 is shaping up to be the year of everywhere malware. Cybercriminals are looking for ways to maximize their income, and shift tactics in response to changes in the market. As the value of cryptocurrencies drops, they shift away from cryptomining. App stores are getting better at finding and deleting malicious apps, so cybercriminals bypass the stores and go directly to consumers. As the mobile platform remains a key target for ransomware developers, identity thieves and nation states, it is imperative to maintain diligence when considering which apps to install or following any link.

The McAfee Mobile Threat Report 2019 highlights the following mobile trends:

Increase in popularity of fake apps – Fake apps are and will be one of the most effective methods to trick users into installing suspicious and malicious applications on Android devices. With more than 200 million players globally, Fortnite has taken the world by storm and over 60 million people have downloaded the app, leading to several fake apps pretending to be various versions of the game.

Letting them inside with mobile backdoors – With smartphones connected to and controlling multiple items in people’s homes, cybercriminals are looking for new ways to trick users into letting them inside. While not new, in 2018 we saw the impact that TimpDoor, becoming the leading mobile backdoor family by more than 2x and showing how phishing over SMS is still effective to trick users into installing unknown applications.

Continued financial threats spike globally - A global spike in banking Trojans on mobile devices has continued, targeting account holders of large multinational and small regional banks. Cybercriminals continue to innovate in different distribution vectors for this threat, from phishing SMS messages to applications with real functionality that gets its malicious payload to bypass security checks on app marketplaces.

Mobile cryptomining – Cyber criminals are looking to find ways to add value to their digital wallets without the cost of doing their own mining. The popularity of Android-based devices not only makes them a prime target, but the latest cryptomining technique can jump from phone or tablet to smart TV to infect your entire environment.
Spyware attacks spike on mobile. From Operation RedDawn, targeting North Korean defectors, and FoulGoal, possibly targeting Israeli FIFA World Cup fans, mobile devices remain an attractive target of nation state actors to gather intelligence and track victims.

Increased risk of IoT attacks at home – The increasing proliferation of IoT devices are bringing conveniences that we could have never imagined, but they are also increasing the number of possible points of attack in our homes.

Prevent Data Leaks Caused by Web Applications - eScan

Security Researcher Elliot Alderson has discovered a huge leak of Aadhaar numbers from Indane's website as well as app. The leak has not just put Aadhaar number of 6.7 million people at stake but also their personal details.

Data breaches like these do not necessarily translate into a complicated attack by hackers, they may be simple attacks attributed to configuration errors or unpatched systems or coding error. However, when the same issues are discovered by Security Researchers, who put in efforts to find a way into the system and following the processes laid down for responsible disclosure, then these are termed as bugs / vulnerabilities.

Organizations lately have been hiring researchers to find vulnerabilities in their networks / systems with the objective to ensure that their systems are protected and decrease the footprint of the attack surface that may otherwise allow easy access to the hackers.

Existence of vulnerabilities in Web Applications, pose a greater risk to the integrity of the entire system, while mobility being the new mantra, we are embracing web-application and are moving towards cloud based systems at a much greater pace than ever before. Web-Applications viz, ERP, CRM, Emails are a conduit to the data which is essential for the functioning of an organization and unlike their stand-alone / networked counterparts, have a much larger attack surface.

Search engine caching paradigm
According to eScan, there have been instances when confidential datasets have been cached by Google, which otherwise shouldn't have been left exposed for general public to view and for hackers to gain foothold into the system.

Caching of datasets by search engine is an excellent example to the non-existence / therein lack of Authentication and Access Management, which is an inherent requirement when data is being served. The recent leak which was exposed by the French Researcher "Elliot Alderson" was cached by Google's Search Engine, furthermore, this cached dataset was devoid of authentication would have allowed anyone with scripting knowledge to automate the data-mining tasks on the actual urls. Presently, as per our observation, the erring URIs has been taken down by Indane.

Could this have been averted?
Dynamic Application Security Testing facilitates organizations to test their web-based applications / web-sites for existence of vulnerabilities viz. XSS, CSRF, SQLi, LFI / RFI, furthermore, pages which are supposed to be accessible after authentication are also tested for vulnerabilities which may allow users to gain access to the other resources served by the application.

In this case Unauthenticated API Endpoints were solely responsible for allowing anyone with the knowledge of using Google Search Engine to gain access to the datasets, which otherwise should have been protected.

DAST Solutions also facilitate organizations to discover such vulnerable end-points not just by crawling the web-application by also by querying and analyzing the results of the search engines.

The need of the hour for all organizations which handle sensitive data should conduct regular DAST audits of their web-applications.

Tata Motors Names its Upcoming Premium Urban Car as “ALTROZ”

Following its unveil at the Auto Expo 2018 as the 45X Concept, Tata Motors is now gearing up to launch its next generation premium urban car. Leading up to the global premier of the production version of this vehicle at the Geneva Motors Show 2019, Tata Motors has christened this highly anticipated urban car as the ‘ALTROZ’.

Inspired from the magnificent bird ‘Albatross’, the ALTROZ is all set to woo its customers with its class leading offerings. Resonating with the characteristics of the Albatross, the ALTROZ will shine above all its contemporaries with its Agility, Speed, and Efficiency along with best-in-class performance and in-cabin space.

Announcing the name of this much-anticipated vehicle, Mr. Mayank Pareek - President, Passenger Vehicle Business Unit, Tata Motors said – “We are extremely elated to announce the name of our upcoming model, which will redefine the premium hatchback segment for the industry. With superlative design elements and a versatile architecture, the Tata ALTROZ is the perfect amalgamation of futuristic design, advanced technology, class leading connectivity, thrilling performance and smart packaging. We are excited to introduce this product to our customers and are gearing up for its commercial launch in mid - 2019. With Turnaround 2.0 now in full swing, we aim to continue winning sustainably in the PV segment through such timely product interventions”.

The ALTROZ will be the first product to be engineered on the new ALFA (Agile Light Flexible Advanced) Architecture. With lightweight, modular and flexible characteristics, the ALFA architecture has the ability to evolve into a range of modern and youthful vehicles within a short development cycle. Conceptualized under the IMPACT 2.0 design language, the ALTROZ aims at reinventing the urban car design with greater emphasis on class leading connectivity and everyday mobility.

Tata Motors also announces the digital footprint of the brand ‘ALTROZ’. Consumers can follow the journey of the ‘ALTROZ’ from the 45X Concept to its commercial launch on the dedicated brand Instagram handle @TataAltrozOfficial,  on the Tata Motors Facebook page (@TataMotorsGroup )and Twitter handles (@TataMotors).

Zomaland is All Set to Enthral Bangaloreans During March 2019

After an incredible set of shows in Delhi & Pune, India’s grandest carnival, Zomaland, is heading to Bengaluru in March. It will bring together some of the top eateries from across the city, a stellar line-up of music artists and comedians, and never-seen-before interactive installations.

With live entertainment, multiple cuisines & a vintage funfair filled with fun & games for all ages, this three-day long festival is sure to delight one & all.

Zomaland is bringing a massive entertainment lineup, with music by the likes of International sensation - Jay Sean, the real Gully Boy - Divine, India’s youth icon - Ritviz, renowned Hindi rock band - The Local Train, comedy acts by top stand-up comics - Varun Thakur and Rohan Joshi, and a host of other exciting performances. It will also have some of the city’s most popular restaurants under one roof - Via Milano, Biggies Burger ‘N’ More, Fish Chain, Aubree, Delhi Highway and AB’s Absolute Barbecues, to name a few. 

Where:  White Orchid Convention Center, Bengaluru

When:  01- 03 March 2019

Timing:  12pm- 10pm

Entry Ticket: Early bird tickets starts at ₹150 only on Zomato App.

KIAMS Organizes “Talent Acquisition in the Digital Age” - HR RoundTable 2019 in Bengaluru

Kirloskar Institute of Advanced Management Studies (KIAMS) organised a National level HR Round Table Conclave on 26th Feb 2019 at The Chancery Pavilion, Bangalore.

Theme of the event was “Talent Acquisition in the Digital Age”     

The event was the brainchild of Mr Balachandar N, Group Director - HR, Coffee Day Group and Prof. Pankaj Roy Gupta, Director Corporate Relations & Business Analytics.

The Conclave focused on:

1.   Talent acquisition in the digital age
2.   Leadership hiring for the digital era
3.   Winning the war for talent-HR & CEO debate
4.   New age digital tools-Leveraging HR Tech for improved productivity in hiring
5.   Leverage technology  On-Boarding
6.   Diversity hiring.

Speakers and panelists at the conclave included eminent HR leaders from Coffee Day Group, Qikpod, Kloudq Technologies, Intelligent Community Management Private Limited, Heidrick & Struggles, Swiggy, Qwik Cilver Solution Pvt. Ltd, Infosys, Siemens Technology India, Exide Life Insurance, Kirloskar Pnuematic Co. Ltd, JobForHer, CGI, Harman International and Workplaceif.

These experts are alumni of IIT’s, IIM’s, BITS Pilani, XLRI and Harvard Business School with varied sectoral experience in Consultancy, FMCG, Retail, Banking, BFSI, AI, IT and ITES.

Thrust of the discussions during the conclave highlighted the challenges faced by companies in acquiring, managing and retaining talent in the digital era. The need for diversity in talent as well as technology for improving employee productivity were also critical issues debated.

Attendees hailed from companies across the country including IBM, United Sports, Sical Logistics, Samasta Microfinance, Adeccco Group, Times of India Group, Astrazeneca to name a few.

We are grateful to our sponsors- JobsForHer and Kloudq Technologies

We are humbled by the support of all Kirloskar Group Companies-

1.Kirloskar Oil Engines Ltd
2. KirloskarPneumatic Company Ltd
3. Kirloskar Chillers Pvt. Ltd
4. Kirloskar Ferrous Industries Ltd
5. Kloudq Technologies Ltd
6. C4i4 Lab

Skill India Gets a New Boost as NSDC Signs MoU with Singapore Polytechnic & Terra Orient Skills Academy

Reinforcing its commitment towards creation of a world-class workforce in India, the Ministry of Skill Development and Entrepreneurship (MSDE) organised ‘Aero Skills Seminar 2019’ at Air Force Station Yelahanka in Bangalore. The seminar was graced by the presence of by Rajesh Aggarwal, DG- DGT, MSDE; Mr. Prakash Sharma, CFO, National Skill Development Corporation (NSDC), Mr. Soh Wai Wah, CEO & Principal, Singapore Polytechnic, Mr. Suresh Ramanathan, Chairman, Terra Orient Pte Ltd.

One of the key highlights of the seminar was the signing of a Memorandum of Understanding (MoU) between NSDC, Singapore Polytechnic and TerraOrient Skills Academy, to establish Centres of Excellence for Advance Skilling in India. Marking a unique public-private partnership between the three organisations, these Centres of Excellence will provide training and certification drawing from Singapore pedagogy and standards, in priority sectors under ‘Skill India’ and ‘Make in India’ programs that require a large workforce, equipped with higher-level technical skills. These centres will act as regional hubs for the training of India’s youth for domestic and overseas placements.

Terra Orient Skills Academy, a wholly owned subsidiary of Singapore-based investment holding company, Terra Orient Pte Ltd., will also support establishment of an ‘Aerospace and Aviation Centre of Excellence in Advance Skilling’ in Bangalore.

Speaking at the seminar, Shri Rajesh Agarwal, Director General of Directorate General of Training, MSDE said, “Aerospace and Aviation are amongst the most dynamic sectors that will spearhead the technological charge of the future, leading to a demand for qualified and trained workforce who can cater to this growing need.”

Exchanging the MoU, Mr. Prakash Sharma, Chief Financial Officer, NSDC said, “NSDC’s strategic alliance with Singapore Polytechnic and Terra Orient is aimed at building a strong workforce that will drive growth in sectors which demand high-technical skilling such as aviation and aerospace. These centres of excellence, equipped with modern infrastructure and technology, will drive best-in-class framework for vocational training and quality assurance.”

Mr. Soh Wai Wah, Principal and Chief Executive Officer, Singapore Polytechnic said, “Singapore Polytechnic is privileged to bring our model of TVET education to India.  As much as we are ready to offer expertise, we know that we will also be learning from our experience in India.”

The collaboration has commenced with skill training of two candidates, winners in Aircraft Maintenance category at the India Skills National competitions in Oct 2018.  These two bright candidates – Archana Reddy and Ananda Sri Ganesha - will be undergoing a  30 day training program at Singapore Polytechnic’s Aero Hub, to prepare them for forthcoming WorldSkills International event in Russia. This programme is co-funded by Singapore investment holding company, Terra Orient Pvt. Ltd and is promoted by Aerospace and Aviation Sector Skill Council. 

The Aero Skill Seminar, titled ‘Skilling for Creating a World-class Workforce’, was held on the sidelines of the ongoing Aero India Show 2019.  NSDC, under the aegis of MSDE has also put up a Skill Pavilion at the event, which is witnessing participation of more than 20 partners, active in skilling, such as Indian Air Force, Bird Academy, MRO Association India, Hindustan Aeronautics Limited, JetSetGo Aviation Services, Aerospace & Aviation Sector Skill Council, among others. 

Indian Students Showcase New-Age Tech at Virtual Reality Day Co-Organised by Facebook

In an initiative co-organised by Facebook and SV.CO, involving college students who want to a make a career in new-age technologies, 21 young developers showcased their products and skills, as part of the Facebook School of Innovation VR Demo Day on Saturday.

A collaboration of Facebook and Startup Village Collective (SV.CO), the maiden edition of the VR Day enabled 10 student teams, shortlisted after a pan-India selection process, to build a next-generation product idea using virtual reality.

The demonstrations, which were made to members of the Facebook team and an industry expert, concluded with the announcement of the National VR Student Developer of India, with team VR Bro’s from Rajasthan walking away with a prize for their VR Application on "Bails Down".

The VR Application by Mayank Bhutani and Koustubh Gupta from BITS Pilani institute focused on creating an immersive VR experience of a Street Cricket player becoming a successful and famous cricketer. The other participating teams are from 7 states.

Prior to their demonstrations, the teams participated in a 20-week program that included online and in-person learning sessions to develop their ideas, build a low and high-fidelity prototype and finally launch the product to customers. The developer training was conducted under the mentorship of five professionals, who are experts in the field of emerging technologies.

The purpose of the VR Programme, built in collaboration with industry partners like Scapic and Unity, will help to develop skill sets that are required to transform Virtual Reality ideas into next-generation, globally marketable products and services.

Satyajeet Singh, Head of Platform Partnerships for India and South Asia, Facebook, said, “With disruption being the new norm driving the Indian technology ecosystem today, we want to equip our budding entrepreneurs with the latest in emerging technologies and enable them to become problem solvers of tomorrow. The Facebook School of Innovation and the VR Day Program seeks to encourage the spirit of entrepreneurship in Indian students and impart them with relevant skill sets, to bridge the gap between academia and industry requirements.”

Speaking about the program, Suma Sundararajan, Programme Head and Chief Operating Officer of SV.CO, said, “Through the School of Innovation, we now have students who have transformed themselves from being enthusiasts in an emerging technology to become industry-ready, professional VR developers who are capable of building stand-alone VR applications. Students now have a choice to use their skills to take a job, build their own startup or go for masters in areas like Gaming or Machine Vision.”

During the course of the training program, the student developers engaged with the global best practices through multiple online sessions with global Virtual Reality experts. The students were given access to the Oculus GO VR Devices to build their applications and product prototypes.

These technological innovations were demonstrated at the School of Innovation VR Day, which was attended by an array of vice-chancellors, members from the state startup missions, fellow students and parents.

For the VR Day Programme, the engineering and design students who were shortlisted through a three-part selection process belong to some of the most well-known institutes of the country, such as: BITS Pilani, NIT Calicut, College of Engineering Pune, KIET Ghaziabad, Meerut Institute of Engineering and Technology, Rajiv Gandhi Institute of Technology, Kerala, Sri Sairam College of Engineering, Bengaluru, and Image College of Arts, Animation and Technology.

Of the pool of 21 participants showcasing their work on the platform, the shortlisting process was conducted via a series of workshops conducted by Facebook and SV.CO across India, which saw a participation of over 5,000 students, while the remaining 18 were selected from 1,191 applications received from across India.