Data of 6 Lakh Indians Stolen, Sold on Bot Markets So Far; Around 50 Lakh Users Affected Globally, Study Shows

A study of three major bot markets found stolen logins including those from Google, Microsoft and Facebook accounts.

By Reuters | Updated: 8 December 2022 13:58 IST

Data of 6 Lakh Indians Stolen, Sold on Bot Markets So Far; Around 50 Lakh Users Affected Globally, Study Shows

Photo Credit: Reuters

NordVPN tracked data for the past four years, ever since bot markets were launched in 2018

Highlights

ICMR faced around 6,000 hacking attempts within 24 hours on November 30
NordVPN study says that stolen data included digital fingerprints, logins
NordVPN's study looked into Genesis market, Russian Market, 2Easy

Around five million people globally have had their data stolen and sold on the bot market to date, of which 6 lakh are from India, making it the worst affected country, according to one of the world's largest VPN service providers NordVPN.

Bot markets are used by hackers to sell stolen data from victims' devices with bot malware.

The study by NordVPN, of Lithuania's Nord Security, said the stolen data included user logins, cookies, digital fingerprints, screenshots and other information, with the average price for the digital identity of a person pegged at Rs. 490.

AIIMS Delhi Cyberattack Highlights Security Risks

NordVPN tracked data for the past four years, ever since bot markets were launched in 2018.

India has been dealing with cyber security concerns for a while. As recently as last month, multiple servers of the All India Institute of Medical Sciences (AIIMS), a federal government hospital that caters to ministers, politicians and the general public, were infected on November 23, a senior police official told Reuters.

A week after the ransomware attack on AIIMS, the Indian Council of Medical Research (ICMR) faced around 6,000 hacking attempts within 24 hours on November 30, Times of India reported.

Cyberattacks Being Fuelled by Ukraine War, Geopolitics, EU's ENISA Says

Indian cybersecurity rules have tightened only earlier this year, with the Indian Computer Emergency Response Team (CERT) requiring tech companies to report data breaches within six hours of noticing such incidents and to maintain IT and communications logs for six months.

NordVPN's study looked into three major bot markets — the Genesis market, the Russian Market, and 2Easy — and found stolen logins including those from Google, Microsoft and Facebook accounts.

"What makes bot markets different from other dark web markets is that they are able to get large amounts of data about one person in one place," said Marijus Briedis, chief technology officer at NordVPN.

"And after the bot is sold, they guarantee the buyer that the victim's information will be updated as long as their device is infected by the bot."

Researchers of NordVPN found 667 million cookies, 81,000 digital fingerprints, 5,38,000 auto-fill forms, numerous device screenshots, and webcam snaps in their study.

What are the best smartphones you can buy in India in 2022? These are the phones we think stood out the most this year Orbital, the Gadgets 360 podcast. Orbital is available on Spotify, Gaana, JioSaavn, Google Podcasts, Apple Podcasts, Amazon Music and wherever you get your podcasts.

Affiliate links may be automatically generated - see our ethics statement for details.

Comments

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.