Blogs

The State Bank of India (SBI) has reported a suspected data leak after identifying 3,897 customer records containing personal information in a dataset of approximately 3.75 lakh records found on the dark web. In its October 21, 2026, stock exchange filing, the bank said the findings were preliminary and that an investigation was underway to establish the authenticity, source and extent of the exposure.

A website asking you to copy and paste a command to fix an error or complete a security check could be trying to infect your computer. This technique, known as a ClickFix attack, tricks users into running malicious commands themselves instead of exploiting a software vulnerability directly.

A recent alleged job fraud in Delhi highlights how criminals can exploit the trust associated with government employment. According to a report published on October 18, 2026, a 67-year-old retired Delhi Police sub-inspector alleged that he lost ₹40 lakh after being promised government jobs for his two children at the Employees’ Provident Fund Organisation (EPFO).

A pop-up claiming that Microsoft has locked your Windows computer can look convincing, but it may be part of a tech support scam. These warnings are designed to frighten users into calling a fake support number or installing software that gives strangers remote access to their computers. Security research published in October 2026 identified a large network distributing such scam pages through more than 20,000 domains.

A familiar voice asking for urgent financial help can be difficult to doubt. However, AI voice cloning is making it easier for scammers to impersonate people we know and exploit that trust. A recent alleged fraud in Mumbai highlights why families and businesses should verify unexpected payment requests, even when the caller sounds genuine.

India’s Computer Emergency Response Team (CERT-In) has warned Google Chrome users about multiple security vulnerabilities that could expose computers to cyberattacks. The advisory, issued on October 14, 2026, highlights the importance of keeping web browsers updated. Since Chrome is widely used for online banking, email, shopping and office work, these vulnerabilities are relevant to both individual users and businesses.

Phishing attacks are becoming easier for cybercriminals to launch with ready-made tools that imitate trusted brands and steal sensitive information. On October 14, 2026, Microsoft announced action against three phishing kits known as CoGUI, Haozi and Iron Man System, which were reportedly sold through an underground marketplace.

Some low-cost Android phones may contain malware before the owner installs a single app. A recent investigation found a threat known as Midnight Mimosa on certain MediaTek-based devices sold under multiple brands. The malware is built into the phone’s firmware, meaning ordinary app removal or a factory reset may not fully remove it.

A critical Bricksforge flaw is under attack, allowing malicious PHP uploads to WordPress sites. Learn essential steps to protect your website and customers now.

An unexpected UPI credit followed by a call asking for an immediate refund could be a warning sign of fraud. The State Bank of India (SBI) has reportedly warned customers about this tactic, known as the jumped deposit scam, where fraudsters exploit confusion over a supposed mistaken payment to trick people into sending money.

A WhatsApp message appearing to come from a senior executive can create a serious financial risk when employees act on it without verification. In a recent Bengaluru case, fraudsters allegedly impersonated a university president to convince an accountant to transfer ₹1.40 crore. The incident highlights how criminals can exploit workplace trust, authority and urgency to carry out large-scale payment fraud.

AI-powered advertising tools are becoming popular with businesses, agencies and freelancers looking for easier ways to manage campaigns. But attackers are now using fake AI advertising portals that imitate well-known services such as ChatGPT, Gemini and Claude to trick users into handing over their login details.

Cyber fraud does not end when a victim sends money. Fraudsters also need bank accounts to receive and move stolen funds. These accounts, often provided by people recruited for quick commissions, are known as mule accounts.

A phone call from someone claiming to be a bank official, followed by a WhatsApp message containing an app, can put a person's money at risk. A recent Mumbai Crime Branch investigation highlights how malicious Android apps are being used as part of banking fraud schemes in India.

Multi-factor authentication (MFA) remains an important security layer, but it cannot stop every phishing attack. A recent campaign shows how attackers can steal Microsoft login details and session cookies even after a victim completes MFA.

A fake delivery message can easily look genuine, especially when it says your parcel is delayed because of an incorrect address. Rajasthan Police has warned users about scammers impersonating India Post, Speed Post and courier companies to steal payment and banking details.

Attackers are using fake ChatGPT Custom GPTs to trick users into installing a remote access trojan (RAT), according to security firm Huntress. The campaign reportedly used sponsored Google results for “chatgpt” to promote malicious Custom GPTs named “Plus 5.6.” Users who interacted with the fake GPT were directed to a fraudulent backup website and then shown a fake Cloudflare-style CAPTCHA.

A recent audit of a data breach at France’s tax administration shows how stolen employee passwords can lead to serious data exposure without highly sophisticated hacking. According to France’s cybersecurity agency ANSSI, attackers likely obtained several dozen staff passwords through infostealer malware on personal devices. Two internal portals reportedly relied only on passwords, allowing attackers to access them using compromised employee credentials.

Security researchers have analysed RatHat, an Android banking trojan that uses a web-based control panel to manage infected devices. According to Cleafy, newer versions reportedly use Google's Gemini API to assess intercepted messages and estimate which victims may have higher-value bank accounts.

Citrix has confirmed active exploitation of two critical vulnerabilities in NetScaler ADC and NetScaler Gateway. The flaws were being exploited as zero-days, meaning attacks were already taking place before fixes were available. For Indian organisations using NetScaler for remote access, this makes immediate patching a priority.