Uncategorized

The recent clash over internet freedoms in Pakistan ignited over the weekend and fizzled out by Monday, yet it laid bare the nation’s profound tensions regarding online content regulation. On Saturday, a member of Pakistan’s Senate proposed a resolution calling for the prohibition of major social media platforms like Facebook, TikTok, Instagram, YouTube, and X (formerly Twitter) within the country. This move followed months of social media shutdowns and internet disruptions linked to the general election. According to the resolution, these platforms were accused of negatively impacting the youth by spreading malicious propaganda against the military and endorsing fake leadership. Senator Bahramand Tangi, in an interview with a Pakistani news outlet, alleged widespread misuse of social media by the majority in the country, specifically pointing fingers at journalists who he claimed openly favored political parties and disseminated their propaganda through social media. However, facing intense criticism over potential violations of constitutional freedoms, the resolution was withdrawn on Monday. Nevertheless, the specter of restrictive measures on social media and the internet continues to loom in Pakistan, as experts caution. Raman Jit Singh Chima, Asia Policy Director at digital rights organization Access Now, highlighted the already significant legal powers wielded by the government. In 2022, amendments to the Pakistan Electronic Crimes Act criminalized online defamation of authorities, imposing severe penalties. Recent events underscore this trend. Independent journalist Asad Ali Toor was arrested last month for allegedly breaching these laws through his online activities. The government and telecom authority frequently employ intrusive measures to block specific websites and communication channels, and they are not hesitant to shut down the internet entirely during protests or demonstrations. The recent restriction on X occurred amidst heightened sensitivity regarding social media limitations in Pakistan. On February 17, access to X was restricted amid escalating unrest and protests over allegations of election fraud. These measures, which also included suspending mobile services on election day, have drawn criticism from opposition groups and international observers. Despite facing backlash, there are concerns that the government may resort to more internet shutdowns and pressure social media platforms for content censorship, prompting calls from digital rights organizations for civil society and policymakers to mobilize against such arbitrary restrictions. While attempting to access the platform on Friday, one of the Pakistani citizens interviewed by Recorded Future News encountered the following message:

News Credit: Cyware An active spyware campaign has been discovered that is mainly targeting Indian military personnel. The spyware campaign has been active since January and detected in dating and instant messaging apps. According to researchers, the recent version of PJobRAT spyware was first observed in December 2019. What has happened? Cyble and 360 Core Security Lab have recently detected the PJobRAT spyware and claimed that the spyware samples are disguised as Android dating apps. During their investigation, researchers detected that this recent variant is disguising as a dating app known as Trendbanter, as well as the Signal app, for non-resident Indians. In some of the cases, the spyware mimics other apps to fool unsuspecting users, such as HangOn, SignalLite, Rita, and Ponam. Moreover, through third-party app stores and other mediums, including malicious URLs and SMS, the attackers had accomplished their propagation goals in which they distributed multiple spyware. To hide in the app list, it imitates WhatsApp or any legitimate-looking app. However, the most unusual thing is that it doesn’t even have the exact icon shown in the app store with the installed one. About PJobRAT  The researchers who detected the recent operation did not link it to any of the hacker groups currently. However, the specific nature of the targets hint at China- or Pakistan-based actors. PJobRAT exfiltrates .pdf, .doc, .docx, .xls, .xlsx, .ppt, and .pptx files from the infected devices. It uploads address books, SMS, audio files, video files, and image files.  Additionally, it uploads a list of installed apps, WiFi/GPS information, geographic location, external storage files, phone number, WhatsApp contacts/messages, and recording via the mic or camera. Conclusion According to recent findings, the attackers behind this spyware are not sophisticated ones since their private servers are accessible publicly where they are holding the exfiltrated data. However, it doesn’t undermine the fact that it is still active and poses a danger to unsuspecting users.