The Sri Lanka Police has warned the public of a financial scam being carried out by persons hacking personal WhatsApp accounts.

The Police said people whose WhatsApp accounts have been compromised can contact support@whatsapp.com to retrieve their accounts.

The public can also file complaints with the Police cybercrimes unit via https://telligp.police.lk regarding such incidents. (Newswire)

The post WhatsApp scams increasing : Police notice for public appeared first on Newswire.

A warning has been issued to 2.5 billion Gmail users over a ‘devastating scam’ that is said to allow hackers to steal banking and sensitive data.

While we can all everything we can to ensure our devices are as secure as they possibly can be, some things are sometimes just out of our hands.

Cybercriminals are seemingly using all the right tricks to take advantage of innocent web users and recently, they have been targeting Gmail customers, which sees them use AI to create realistic phone calls and send out seemingly legitimate emails.

Following these hyperrealistic phone calls, an email is then sent which prompts users to a website that seemingly looks identical to that of the Google website. But the link is very much scam.

And if that link is pressed, then the hackers have the ability to commit identity, financial and information theft.

Spencer Starkey, a vice president at SonicWall, has stated companies such as Google need to be on their toes to ensure their users are safe.

He said: “Cybercriminals are constantly developing new tactics, techniques, and procedures to exploit vulnerabilities and bypass security controls, and companies must be able to quickly adapt and respond to these threats.

“This requires a proactive and flexible approach to cybersecurity, which includes regular security assessments, threat intelligence, vulnerability management, and incident response planning.”

Victim Sam Mitrovic recalled his ordeal, saying to the Metro: “The scams are getting increasingly sophisticated, more convincing and are deployed at ever larger scale.

“People are busy and this scam sounded and looked legitimate enough that I would give them an A for their effort. Many people are likely to fall for it.”

Back in May 2024, the FBI issued a warning about the increasing threat of cybercriminals using AI in their scams to make it difficult for users to spot.

Robert Tripp, from the FBI, said at the time: “Attackers are leveraging AI to craft highly convincing voice or video messages and emails to enable fraud schemes against individuals and businesses alike.

“These sophisticated tactics can result in devastating financial losses, reputational damage, and compromise of sensitive data.”

The FBI also warned about staying vigilant to ensure you don’t become a victim of these scams.

“Be aware of urgent messages asking for money or credentials. Businesses should explore various technical solutions to reduce the number of phishing and social engineering emails and text messages that make their way to their employees,” the website states.

“Additionally, businesses should combine this technology with regular employee education and employees about the dangers of phishing and social engineering attacks and the importance of verifying the authenticity of digital communications, especially those requesting sensitive information or financial transactions.”

Adding a multi-factor authentication is also a good idea, according to the agency to ensure you’re as best protected as possible.

Zach Lata, who is the founder of Hack Club and nearly became a victim to the hack, revealed how cybercriminals used a pretty simple method in an attempt to steal sensitive data. (Unilad)

The post Gmail Scam : Warning issued to 2.5 billion users appeared first on Newswire.

The Sri Lanka Computer Emergency Readiness Team (SLCERT) says investigations are underway into the hacking of the official website of the Sri Lanka Department of Printing.

SLCERT confirmed that the official website has been the target of a cyber attack.

The official website of the Sri Lanka Department of Printing had been hacked with its data being altered, SLCERT added. (Newswire)

The post Department of Printing’s website hacked appeared first on Newswire.

Samagi Jana Balawegaya (SJB) member Mujibur Rahman says his WhatsApp account has been hacked, with an online financial scam targeting his close associates. 

The former MP filed a complaint today with the cybercrimes unit of the  Criminal Investigations Department (CID) in this regard.

Speaking to the media after filing his complaint, Mujibur Rahman said his WhatsApp account had been hacked and several of his close associates had received messages through his mobile number requesting money.

“WhatsApp messages have been sent to my close associates claiming to be and requesting money. Two bank account numbers have also been shared to deposit money. I was notified of this by a friend,” he said.

Stating that some of his close associates had attempted to transfer money to the said bank accounts, the former MP said this was a serious issue. 

Mujibur Rahman pointed out that either a group or an individual is engaging in this financial scam at a time when some politicians contesting the General Election were engaging in election campaigning.

It is reported that Sri Lanka is currently experiencing a rise in WhatsApp account hacks, with cybercriminals using verification code manipulation to gain access to accounts and defraud contacts.

In recent incidents, users have reported receiving unexpected WhatsApp verification codes. Scammers then contact users, posing as friends or acquaintances, to request the code, which, once shared, grants hackers control over the account. (Newswire)

The post WhatsApp account hacked : Mujibur goes to CID appeared first on Newswire.

A probe has been launched into the recent breach of the Sri Lanka Education Ministry’s official website by an unidentified hacker.

Issuing a statement, the Education Ministry said that the probe is being conducted by several parties, including the Sri Lanka Computer Emergency Readiness Team (SLCERT) and the Telecommunications Regulatory Commission of Sri Lanka (TRCSL). 

Expressing regret over the inconvenience caused to the site users, the Education Ministry added that measures are underway to restore the official website as soon as possible. 

The Education Ministry’s website was compromised by an unidentified hacker on Thursday (Apr 04).

The intruder, going by the moniker “Anonymous EEE,” left a message apologizing for the unauthorized access while highlighting security flaws in the system. 

Claiming to be a concerned citizen and A-Level student, the hacker emphasized the breach was reported in the interest of national safety.

“My name is Anonymous EEE and I am currently studying A/l. Sorry for unauthorized access to your website but your website has some security flaws. As a Sri Lankan citizen, I am reporting this for the safety of my country. fix it thanks” a message displayed by the hacker on the Education Ministry Website said. (NewsWire)

The post Probe into Education Ministry website hack appeared first on Newswire.

Some data of government offices under the purview of the President’s Office, Cabinet Office, Ministry of Education, and Ministry of Health were affected in the ransomware attack between May 17 and August 26, 2023, the Information and Communication Technology Agency of Sri Lanka (ICTA) reported. 

According to News 1st, Director of Strategic Communications at ICTA Sampath de Silva confirmed a severe data loss incident affecting certain government offices using the “gov.lk” email domain.

He said crucial government information is exchanged via Lanka Government Network (LGN), utilizing the “mail@gov.lk” email domain.

Stating that the ransomware could have impacted approximately 5,000 email addresses, Sampath de Silva stated there was no offline backup for a critical two-and-a-half-month data period.

The online backup system was also compromised, resulting in the loss of emails during this time frame, Sampath de Silva further said.

He further said two key measures are being implemented to prevent future data loss, such as daily offline backup processes and the upgrading of the relevant application to the latest version with enhanced defences against virus attacks.

The Sri Lanka Computer Emergency Readiness Team (SLCERT) together with the ICTA has taken steps to recover the lost data, he added. (NewsWire)

The post SL Govt emails missing after massive ransomware attack appeared first on Newswire.