Global Cyber Pulse: 25 February 2025

Principle for Securing Today’s Mobile Blog Banner Image
February 25, 2025 | Cybersecurity
By Ashwani Mishra, Editor-Technology, 63SATS

An Android malware disguised as a finance app duped Indian users, while Australia banned Kaspersky software over espionage concerns. In Europe, Poland seeks a cybersecurity declaration amid rising digital risks. A global study revealed 80% of manufacturing firms suffered cyber incidents, yet less than half are well-prepared.

In India, Niva Bupa is investigating an alleged customer data breach, and Gurugram Police arrested 27 individuals linked to a multi-crore fraud. These incidents underscore escalating vulnerabilities, prompting nations and industries to enhance security measures amid evolving digital landscapes, boosting global defense worldwide.

SpyLend Malware Deceives Indian Users on Google Play

An insidious Android app dubbed SpyLend has breached the Google Play Store, impersonating a reliable financial utility. Marketed as Finance Simplified (package: com.someca.count), it has amassed over 100,000 downloads since early February 2025, deceiving Indian users with its official look.

Cybersecurity experts at CYFIRMA uncovered this sophisticated malware campaign, which dynamically alters its interface based on geolocation. The app covertly harvests login credentials and sensitive data while enabling predatory loan schemes and subsequent blackmail attempts. This multi-layered cyber attack highlights the escalating threats targeting mobile users and the urgent need for enhanced security measures. Vigilance remains crucial against evolving threats.

Australia Prohibits Kaspersky Software Over Security Threats

Australia has imposed a ban on the installation of security software by Russian firm Kaspersky, citing national security risks. The government determined that using Kaspersky Lab products and related web services poses an unacceptable threat to governmental networks and sensitive data due to risks of foreign interference, espionage, and sabotage. Under directive 002-2025, all Australian government entities must cease using Kaspersky software and remove existing installations by April 1, 2025.

However, agencies may request exemptions for compelling business needs provided they implement proper risk mitigations. This decision reflects heightened concerns over cybersecurity vulnerabilities and potential espionage linked to foreign technology.

Poland Proposes EU Cybersecurity Declaration in Warsaw Meeting

Poland is set to propose that EU member states endorse a cybersecurity declaration during an upcoming informal meeting of telecom ministers in Warsaw scheduled for early March. The proposed declaration, still under discussion, will emphasize enhanced incident preparedness and increased collaborative measures among nations. As Poland chairs EU meetings during the first half of the year, bolstering cybersecurity remains a top priority. The agenda for the March 4-5 meeting will also address responses to large-scale cyber crises, improvement of civil-military cooperation in digital realms, and strategies for boosting investments in robust cyber defense infrastructure. Stronger digital unity remains imperative always.

Study Reveals Cybersecurity Gaps in Manufacturing Sector

A recent global study by Omdia reveals that 80% of manufacturing firms experienced a marked rise in security incidents last year, yet only 45% have sufficient cybersecurity measures in place. In collaboration with Telstra International, the study surveyed 513 senior security executives from mid- to large-sized manufacturers across diverse regions including North America, Europe, and Asia.

Findings indicate that increased adoption of digital technologies such as cloud, AI, and IoT for Industry 4.0 has expanded operational capabilities while simultaneously enlarging cyber attack surfaces. Cyber incidents have resulted in losses ranging from US$200,000 to $2 million per affected firm.

Niva Bupa Investigates Customer Data Breach Threat

On Friday, Niva Bupa Health Insurance disclosed a cyber threat incident involving an anonymous party claiming to have accessed its customer database. In a regulatory filing, the insurer confirmed it is investigating the alleged breach. An email from an unidentified sender asserted possession of sensitive customer data.

This incident follows similar concerns, as HDFC Life launched a breach investigation in November after receiving unsolicited customer details, while Star Health Insurance suffered a breach affecting 31 million policyholders in September 2024. These cases underscore the urgency for robust cybersecurity and proactive incident management. Insurers now face mounting pressure to fortify defenses.

Gurugram Police Arrest 27 in Rs 157.90 Crore Fraud Scam

Gurugram Police’s cyber crime unit has apprehended 27 individuals, including a minor, in connection with a fraud operation responsible for losses totaling Rs 157.90 crore, as evidenced by 14,633 complaints nationwide. Investigations, utilizing data recovered from 17 mobile devices and three SIM cards at the Indian Cyber Crime Coordinate Center, revealed extensive fraudulent activity.

Out of the numerous complaints, 611 were formally registered as cases, with 28 lodged in Haryana—four of which occurred in Gurugram. The accused confessed to orchestrating scams by fabricating Instagram profiles and misrepresenting investment opportunities, digital arrest schemes, KYC procedures, and task-based fraud methods. Authorities confirm.