Mumbai: Women Lost 64k to Spear Phishing Scam, Scammer Poses As IRCTC Employee

Posted on by
Spread the love
       
  

A woman was duped of Rs 64,000 in a spear phishing scam while enquiring about her reservation against cancellation (RAC) status on IRCTC’s official Twitter handle in an incident of online fraud.

The woman lives in Mumbai’s Vile Parle neighbourhood. Meena had purchased a plane ticket to Bhuj. The three reserved seats on the ticket were RAC.

On Friday, she and her son inquired about the status of their reservation on the IRCTC’s Twitter account. The scammer called the 37-year-old woman after she tweeted her ticket information.

Modus Operandi Of the IRCTC Spear phishing Scam

The scammer introduced himself as an IRCTC customer service executive. The call was attended by Meena’s son. According to The Times of India, the scammer instructed him to download the link and pay Rs 2 in order to obtain the confirmed ticket.

The accused also requested that the woman’s son fill out bank information. Meena’s son followed the caller’s instructions, believing him to be an IRCTC customer service representative.

In five transactions, Rs 64,011 were deducted from the woman’s account. The victim attempted to call the accused’s phone number, but it was disconnected.

The woman approached the police after realising she had been duped in a spear phishing scam. On Saturday, a complaint was filed at the Vile Parle Police Station.

The fraudster called Meena’s son’s phone number, which he had tweeted. They trusted the caller without realising they had shared their ticket information, which the fraudster used to gain their trust.

The police have asked the bank to which accounts the money was credited to. A thorough investigation into the matter has been launched.

What Is Spear Phishing Scam?

A Spear phishing scam is a type of social engineering attack in which a scammer disguised as a trusted individual trick a victim into clicking a link in a spoofed email, text message, or instant message.

As a result, the target may unknowingly reveal sensitive information, instal malicious programmes (malware) on their network, or execute the first stage of an advanced persistent threat (APT), to name a few possible outcomes.

While spear phishing scams are similar to phishing and whaling attacks, they are launched in a different manner, and their targets differ from other social engineering attacks.

How To Avoid Against Spear phishing scams?

  • Learn and follow advanced password management policies. 
  • Setting up two-factor authentication for your primary account 
  • Create a security-conscious environment in your organization. 
  • Maintain software updates. 
  • Everyone’s access to sensitive information should be restricted. 
  • Create spear phishing, social manipulation, and cyber security awareness programmes. 
  • Results should be monitored and measured. 
  • Educate students and employees about the dangers of phishing attempts.

Laws Against Spear Phishing Scam

1. Section 66A 

This section addresses the punishment for sending phishing or related information with the intent to cause harm. 

2. Section 66 C

This section punishes anyone who fraudulently uses personal information to commit identity theft. 

3. Section 66

Anyone who cheats by pretending to be someone else faces a minimum of three years in prison and a fine of one lakh rupees.

4. Section 66A

This Section deals with punishing those who commit spear phishing scams. 

5. Section 43

A person is found guilty of violating this section if he or she uses another person’s computer or computer network without the owner’s permission, disturbs, downloads, or assists another person. 

Various Media reports claim that smishing is one of the fastest-growing cyber threats. Many global organisations have reported being the target of such scams in the financial year 2022. We advise our readers to take the above-discussed precautions.

Scam Topics are very sensitive issues that have taken the shape of Crime. The majority of people are not aware of such things. 

Please help us to make people aware of Scam and Cyber Crime by sharing this knowledge and article with others. 
Also Help Us by following us on Instgram, Facebook and Twitter.
Buy Me A Coffee

Our team at Wisdomganga is constantly working to recognize all the possible scams and is focused on making everyone aware of them. If you find this article useful, you can now order a cup of coffee for our team as a token of appreciation.