4361601 Cyber Security and Digital Forensic 226370316054
Practical :- 07
Aim :- Prepare a case study report on 3 different types of cyber-crimes.
( [Link] ([Link]
4361601 Cyber Security and Digital Forensic 226370316054
Practical :- 07
Aim :- Prepare a case study report on 3 different types of cyber-crimes.
( [Link] ([Link]
1. Phishing Attacks
Phishing refers to the illegal acquisition of sensitive information, including
usernames, passwords, and credit card numbers by masquerading as a trustworthy
entity during electronic transactions, communication, and other forms of dealings.
Phishing is usually done via emails, text messages, or social media platforms
where the perpetrators try to trick the users into sharing crucial information by
impersonating legitimate organizations such as banks or even government
agencies.
Case Study:
• Incident: In 2022, an infamous phishing email scam was reported where
individuals impersonated one of the well-known banks and people started
receiving emails from this account. Those emails included links to websites that
were created to look exactly like the official bank website.
• Impact: The scam had an impact on more than 200 people causing significant
losses as the attackers gained access to their bank accounts and login details.
• Resolution: The case of cyber-crime was tracked by the cyber crime investigation
cell where an awareness campaign was initiated to stop the public from falling into
the trap of phishing scams. Many people were arrested, and the fake websites were
taken down.
Preventive Measures:
• Always check the email addresses or numbers from which you have received any
messages.
• Do not click on any unfounded or untrusted links provided in the emails.
• Use two-step verification for your online accounts
4361601 Cyber Security and Digital Forensic 226370316054
2. Cyber Extortion Attacks
Ransomware refers to a kind of malicious software that encodes files on a system
or computer in a way that makes it impossible to access its data. The files are only
decrypted upon the payment of a specified ransom amount. Failure to meet these
requirements can lead to permanent loss of data.
Case Study:
• Incident: A ransomware attack was reported in 2021 when a renowned healthcare
service provider in Gujarat was attacked. Their system was encrypted, and the
hackers’ decryption demands were exorbitantly set in cryptocurrency.
• Impact: The attack lead to several days of suspension of operations, and patient
data was initially stripped off. This greatly limited the medical services provided.
• Resolution: After reporting the attack, law enforcement worked alongside cyber
security professionals to lessen the effects. Systems were restored to their former
state safely, and no ransom was ever paid since their demands were ignored.
• Post-Incident Actions: Timely measures brought forth the need to improve
cybersecurity, and scheduled frequent backup reform units.
Preventative Measures:
• Patching of security gaps and software should be performed often.
• Sensitive information should be saved in new locations continuously.
• Blocking links and attachments from suspicious sources.
4361601 Cyber Security and Digital Forensic 226370316054
3. Identity Theft
The term identity theft refers to when a person steals another person's personal
information (like social security number, bank accounts, or any other sensitive
information) in order to defraud them. This can result in the use of their credit card,
other intricate schemes, and having a number of illegal transactions done.
Case Study:
• Incident: During covid in 2020, a woman in Maharashtra had her personal
information compromised due to a hacked e-commerce website. This was done
with the intent of taking loans and credit cards in her name.
• Impact: The victim suffered from huge financial deficits, and the victim’s credit
score was affected from the fraudulent accounts.
• Resolution: Once the victim discovered the suspicious activity on their account,
they lodged a complaint to the police and the National Cyber Crime Reporting
Portal. The police were able to track down the cybercriminals using IP addresses.
The criminals were captured, and the loans were canceled.
• Post – incident Action: The authorities suggested the victim of the case to alter all
passwords and set up credit protection in order to avoid new issues.
Preventive Measures:
• Create unique and complex passwords that are not easy to guess.
• Frequently check bank statements and credit reports.
• Place credit freezes and alerts with their respective financial companies