It was revealed on Friday that the federal government had provided cybersecurity advice to provincial and ministry administrations to stop data leaks through the dark web.
A portion of the internet that is hidden from search engines is known as the dark web, sometimes known as the darknet.
Users mostly use cryptocurrencies like bitcoin to make payments and are largely anonymous and untraceable.
The warning, headed “Leakage of Sensitive Data on Dark Web (Advisory No 53),” stated that the dark web, which accounts for 96% of all data available on the internet and offers anonymity, serves as a “gateway to the world of crime.”
“Dark/deep web is being used by nefarious mindsets, including criminals, terrorists, Hostile Intelligence Agencies (HIAs), and non-state actors,” it stated.
The advisory lists some of the crimes carried out on the dark web, including:
- Hacking
- Blackmailing
- Website defamation
- Data dumps
- Accessing personal information of citizens and key appointments via leaked databases
- Financial scams via leaked banking details
- Honey pots to trap civilians and government officials
- Terror financing and money laundering
- Disseminating propaganda
- Recruiting terrorists
- Cross-border collaboration and terrorist support
- Drug, human and weapons trafficking
- Bounty hunting and ransom attacks
“Users are advised to put in efforts to protect personal and official data from being exposed to cybercriminals and further leakage on hacking forums/dark web,” the advisory stated.
It offered a set of rules to guarantee the security of the data. Which are:
- Stay away from exploring dark web sources
- Remain vigilant while surfing the web
- Never forward, or click a link or pictures shared on email or WhatsApp by unknown sources
- Apply two-factor authentication on all email, social media, and banking accounts.
- Never share a One-Time Password (OTP) with anyone
- Do not install untrusted software or applications (without digital signature) from third-party sources on Windows and Android/i0S phone
- Do not install unnecessary plugins on browsers except Adblock and Adblock plus
- Always install and regularly update reputed antimalware/anti-virus solutions on both Windows/Android phones
- All under command be sensitized not to share personal information, passwords, or sensitive information on phone calls
- Phishing calls from unknown numbers must not be trusted and reported to PTA if found suspicious
- To counter social engineering/scam phone calls, always ask relevant questions from the caller and carefully judge him/her to ensure authenticity
The warning comes months after a slew of online audio leaks of discussions involving prominent political figures, including former Prime Minister Imran Khan and current PM Shehbaz Sharif.
Reports at the time claimed that a hacker or collective, which had previously participated in hacks on behalf of India, had posted a data dump featuring communications from the Pakistani PM Office for sale on the dark web.
Users placed a minimum price of roughly 18 BTC, or $345,000 in Etherscan tokens, claiming that the online recordings that were leaked were given by the suspected hacker(s) as evidence that they were in fact in possession of crucial data.
To read our blog on “Hackers supposedly responsible for PM office audio leaks arrested,” click here.