Connect with us

News

Lankans victim of India based cyber espionage?

Published

on

Sri Lanka is among the south Asian nations where people’s data had been harvested by an India-based threat actor dubbed Patchwork, says the Hacker News.

It said that the Meta has uncovered massive social media cyber espionage operations across South Asia, adding that three different threat actors leveraged hundreds of elaborate fictitious personas on Facebook and Instagram to target individuals located in South Asia as part of disparate attacks.

 “Each of these advanced persistent threats (APTs) relied heavily on social engineering to trick people into clicking on malicious links, downloading malware or sharing personal information across the internet,” Guy Rosen, chief information security officer at Meta, said. “This investment in social engineering meant that these threat actors did not have to invest as much on the malware side.”

The fake accounts, in addition to using traditional lures like women looking for a romantic connection, masqueraded as recruiters, journalists, or military personnel.

At least two of the cyber espionage efforts entailed the use of low-sophistication malware with reduced capabilities, likely in an attempt to get past app verification checks established by Apple and Google.

 One of the groups that came under Meta’s radar is a Pakistan-based advanced persistent threat (APT) group that relied on a network of 120 accounts on Facebook and Instagram and rogue apps and websites to infect military personnel in India and among the Pakistan Air Force with GravityRAT under the guise of cloud storage and entertainment apps.

The tech giant also expunged about 110 accounts on Facebook and Instagram linked to an APT identified as Bahamut that targeted activists, government employees, and military staff in India and Pakistan with Android malware published in the Google Play Store. The apps, which posed as secure chat or VPN apps, have since been removed.

Lastly, it purged 50 accounts on Facebook and Instagram tied to an India-based threat actor dubbed Patchwork, which took advantage of malicious apps uploaded to the Play Store to harvest data from victims in Pakistan, India, Bangladesh, Sri Lanka, Tibet, and China.

Also disrupted by meta are six adversarial networks from the U.S., Venezuela, Iran, China, Georgia, Burkina Faso, and Togo that engaged in what it called “coordinated inauthentic behavior” on Facebook and other social media platforms like Twitter, Telegram, YouTube, Medium, TikTok, Blogspot, Reddit, and WordPress.

All these geographically dispersed networks are said to have set up fraudulent news media brands, hacktivist groups, and NGOs to build credibility, with three of them linked to a U.S.-based marketing firm named Predictvia, a political marketing consultancy in Togo known as the Groupe Panafricain pour le Commerce et l’Investissement (GPCI), and Georgia’s Strategic Communications Department.

Two networks that originated from China operated dozens of fraudulent accounts, pages, and groups across Facebook and Instagram to target users in India, Tibet, Taiwan, Japan, and the Uyghur community.

In both instances, Meta said it took down the activities before they could “build an audience” on its services, adding it found associations connecting one network to individuals associated with a Chinese IT firm referred to as Xi’an Tianwendian Network Technology.

The network from Iran, per the social media giant, primarily singled out Israel, Bahrain, and France, corroborating an earlier assessment from Microsoft about Iran’s involvement in the hacking of the French satirical magazine Charlie Hebdo in January 2023.

“The people behind this network used fake accounts to post, like and share their own content to make it appear more popular than it was, as well as to manage Pages and Groups posing as hacktivist teams,” Meta said. “They also liked and shared other people’s posts about cyber security topics, likely to make fake accounts look more credible.”

The disclosure also coincides with a new report from Microsoft, which revealed that Iranian state-aligned actors are increasingly relying on cyber-enabled influence operations to “boost, exaggerate, or compensate for shortcoming in their network access or cyberattack capabilities” since June 2022.

The Iranian government has been linked by Redmond to 24 such operations in 2022, up from seven in 2021, including clusters tracked as Moses Staff, Homeland Justice, Abraham’s Ax, Holy Souls, and DarkBit. Seventeen of the operations have taken place since June 2022.

The Windows maker further said it observed “multiple Iranian actors attempting to use bulk SMS messaging in three cases in the second half of 2022, likely to enhance the amplification and psychological effects of their cyber-influence operations.”

The shift in tactics is also characterized by the rapid exploitation of known security flaws, use of victim websites for command-and-control, and adoption of bespoke implants to avoid detection and steal information from victims.

The operations, which have singled out Israel and the U.S. as a retaliation for allegedly fomenting unrest in the nation, have sought to bolster Palestinian resistance, instigate unrest in Bahrain, and counter the normalization of Arab-Israeli relations.



Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

News

GMOA warns of trade union action unless govt. urgently resolves critical issues in health sector

Published

on

Influx of substandard drugs is of particular concern

The Government Medical Officers’ Association (GMOA) has warned of renewed and intensified trade union action if the government fails to fulfil its promise to resolve the ongoing crisis in the health sector within the next few days.

GMOA Executive Committee member Dr. Prasad Colombage said his association was hopeful that commitments made by the government, including those formally stated by the Minister of Health in Parliament and recorded in the Hansard, would be implemented.

He called for urgent remedial action in view of the influx of substandard medicines into the country, patient deaths linked to such drugs, difficulties faced by doctors in prescribing medicines, and disruptions to patient care services caused by the continued migration of medical professionals. These factors, he warned, had placed patients’ lives at serious risk.

Dr. Colombage said discussions had already been held with all relevant authorities, including the President and the Minister of Health. He expressed hope that swift solutions would be forthcoming based on agreements reached at discussions. However, he cautioned that the GMOA would not hesitate to resort to strong trade union action if tangible progress was not seen in the coming days.

Meanwhile, the Federation of Medical and Civil Rights Professional Associations yesterday (01) handed over a special memorandum to President Anura Kumara Dissanayake, calling for immediate action to resolve the deepening crisis in the health sector.

Federation President, Consultant Dr. Chamal Sanjeewa, said Sri Lanka’s health system was currently facing a severe crisis and had sought an opportunity to hold discussions with the President on the matter.

The memorandum calls for the President’s direct and immediate intervention on several key issues, including the Indo–Sri Lanka health agreement, shortages of essential medicines including cancer drugs, continued allegations surrounding the administration of the Ministry of Health, reported irregularities at the National Hospital, Colombo, and the absence of an internationally accredited quality control laboratory for the National Medicines Regulatory Authority to test medicines. The Federation has also requested a meeting with the President to discuss these concerns in detail.

By Sujeewa Thathsara ✍️

Continue Reading

News

Elephant census urged as death toll nears 400

Published

on

Sri Lanka’s latest elephant census must result in immediate policy action, not remain a paper exercise, Centre for Environmental Justice (CEJ) Managing Director Dilena Pathragoda warned, as nearly 400 wild elephants have already died in 2025 alone amid escalating human–elephant conflict.

With the national elephant population estimated at around 5,879, Pathragoda said the figures would be meaningless unless they shape land-use planning, habitat protection and enforcement.

“As of mid-December, close to 397 elephants have died in 2025, mostly due to shootings, electrocution, train collisions and other human-related causes,” he told The Island. “When deaths continue at this scale, census numbers alone offer little reassurance.”

Official data show that 388 elephants died in 2024, while 2023 recorded a staggering 488 deaths, one of the highest annual tolls on record. Conservationists warn that the trend reflects systemic failure to secure habitats and elephant corridors, despite repeated warnings.

“An elephant census should not end with a headline figure,” Pathragoda said. “If these statistics do not influence development approvals, infrastructure planning and land-use decisions, they fail both elephants and rural communities.”

Elephant populations remain unevenly distributed, with higher densities in the Mahaweli, Eastern and North Western regions, while other areas face sharp declines driven by habitat fragmentation and unplanned development.

Pathragoda said recurring fatalities from gunshots, illegal electric fences, improvised explosive devices along with poisonings  and rail collisions expose the limits of short-term mitigation measures, including ad hoc fencing projects.

“The crisis is not a lack of data, but a lack of political will,” he said, calling for binding conservation policy, transparent environmental assessments and accountability at the highest level.

He urged authorities to treat elephant conservation as a national governance issue, warning that failure to act would only see future censuses record further decline of these majestic animals.

“Elephants are part of Sri Lanka’s natural heritage and economy,” Pathragoda said. “Ignoring these warning signs will come at an irreversible cost.”

By Ifham Nizam ✍️

Continue Reading

News

CTU raises questions about education reforms

Published

on

The Ministry of Education has yet to clarify whether school hours will be extended by 30 minutes from next Monday (05) under the proposed new education reforms, Ceylon Teachers’ Union (CTU) General Secretary Joseph Stalin has said.

Stalin told The Island that the Ministry should reconsider the planned reforms, warning that decisions taken without adequate study and consultation could have serious repercussions for nearly four million schoolchildren.

He said the Education Ministry had announced that education reforms would be implemented in Grades from 1 to Grade 6, but it had not said anything about the Grades above 6. This lack of clarity, he said, had created confusion among teachers, parents and students.

Stalin also noted that although learning modules had been issued, students are required to obtain photocopies based on the codes introduced in these modules. However, the Ministry had not revealed who would bear the additional financial burden arising from those costs, raising further concerns over the practical implementation of the reforms.

by Chaminda Silva ✍️

Continue Reading

Trending