Beware: Indian Government Websites Redirecting Users to Scam Sites – What You Need to Know!
In recent months, concerns have resurfaced regarding scam links on Indian government websites. Despite previous reports, it appears that several official domains continue to host links that redirect users to fraudulent online betting and investment platforms.
Ongoing Issues with Scam Links
A recent investigation by TechCrunch uncovered over 90 instances of “gov.in” website links associated with various Indian government departments, including notable organizations like the Indian Council of Agricultural Research and India Post. These links have been redirecting unsuspecting users to sites connected to online scams, heightening concerns among internet users.
Search Engine Indexing Raises Concerns
Search engines, notably Google, have indexed these scam links, making it easier for users to stumble upon them during routine searches. This situation poses a significant risk, as many people may unknowingly engage with malicious content.
- Over 90 “gov.in” links found redirecting to scam sites
- Notable government departments affected include:
- Indian Council of Agricultural Research
- India Post
- State governments of Haryana and Maharashtra
- Search engines have indexed these links, increasing visibility
Previous Reports and Government Response
In May, TechCrunch initially reported that around 48 Indian government websites were compromised, redirecting users to online betting platforms. In response, the Computer Emergency Response Team of India (CERT-In) escalated the issue. However, it remains uncertain if the government has effectively addressed the vulnerabilities exploited by scammers.
Expert Insights on the Compromise
Security expert Bob Diachenko shared insights with TechCrunch, suggesting that the recurring issue could stem from vulnerabilities within the websites’ content management systems (CMS) or server configurations. He emphasized the importance of addressing the root cause of the problem:
“If only the symptoms (e.g., malicious content) are removed without addressing the root cause (e.g., vulnerability or backdoor), attackers can reintroduce the issue,” Diachenko stated.
He further noted that while resolving these vulnerabilities may not be overly complicated, it demands dedicated effort and potentially some downtime for the sites involved.
Current Status and Future Actions
Recently, TechCrunch reached out to CERT-In regarding several affected links, but there has been no response as of yet. Interestingly, the links began displaying a “page not found” error shortly after the inquiry was made, suggesting that the issue might be in the process of being addressed.
For ongoing updates and more information on cybersecurity, visit CERT-In’s official website. It is crucial for internet users to remain vigilant and avoid clicking on suspicious links, especially those associated with official domains.
