Zoomcar, India’s first self-drive mobility platform has entered into a partnership with Truecaller and has integrated Truecaller’s mobile identity solution, Truecaller SDK [Software Developer Kit] in the Zoomcar consumer app.

The integration with Truecaller SDK enables Zoomcar users to instantly sign-up or log in with their Truecaller mobile number-based identities in a simple and quick manner and in the process completely bypassing the SMS based OTP process.

In addition, this integration aims to further bolster Zoomcar’s customer identity verification process which in turn helps minimizing risks of less verified users and maximizing trust in the Zoomcar platform.  The current verification process which already includes validation through Aadhar, Driving License, PAN card, etc will become even stronger with the addition of Truecaller-based mobile identity verification.

Commenting on the partnership, Greg Moran, CEO & Co-founder, Zoomcar said

Zoomcar is excited to partner with Truecaller to offer a secure, seamless solution for customers to join the Zoomcar platform. As a company, we have always prioritized the safety and security of our customers and this integration helps ensure this remains firmly in place as we scale.

Commenting on the partnership, Priyam Bose, Director & Head, Global Developer & Startup Relations, Truecaller said

As the world’s leading mobile-based identity platform, Truecaller continues to push the boundaries of its value proposition to businesses and customers alike. Our mobile identity platform is perfectly suited to a key service like Zoomcar which has been built for the digital users seeking frictionless, personalized and trust-based experience. We are confident that Truecaller SDK toolkit will help Zoomcar customers achieve a more seamless experience.

Truecaller SDK, as part of Truecaller mobile identity platform is a toolkit for digital startups, app developers, and other online businesses. An efficient, secure and asset-light solution, Truecaller SDK is designed to minimize complexity in user on-boarding and verification process. In turn helps businesses build more trust on their products and platforms, offer more personalisation and enables further evolution of the quality of users being served by them.

About Zoomcar

Zoomcar holds the distinction of being India’s first self-drive mobility platform, with the introduction of car sharing services in 2013 and the introduction of cycle sharing services in 2017.  With a strong focus on the mobile experience, Zoomcar allows users to rent cars by the hour, day, week, or month.  Cycles can be rented in increments of 30 minutes.  Founded in 2013 and headquartered in Bangalore, Zoomcar operates in nearly 30 cities across India. For more information, please visit Zoomcar

SonicWall, the trusted security partner protecting more than 1 million networks worldwide, announced research and intelligence findings from its 2018 Cyber Threat Report. In sum, the company recorded 9.32 billion malware attacks in 2017 and saw more than 12,500 new Common Vulnerabilities and Exposures [CVE] reported for the year.

Bill Conner, CEO, SonicWall, said

The cyber arms race affects every government, business, organization and individual. It cannot be won by any one of us. Our latest proprietary data and findings show a series of strategic attacks and countermeasures as the cyber arms race continues to escalate. By sharing actionable intelligence, we collectively improve our business and security postures against today’s most malicious threats and criminals.

Last year by June alone, India faced cyber security threats worth over $4 billion. Financial sector witnessed a little less than 50% cyber attacks throughout the year. Needless to mention, it is one of the most targeted countries owing to several reasons such as rapid transition into a cashless economy, increased usage of wireless data, among others.

Debashish Mukherjee, Country Director India & SAARC, SonicWall, while speaking about the threats faced specifically within the country had this to share about his observations

A vast majority of internet traffic is encrypted but most of the vendor solutions are not even addressing that space. We observed this encrypted traffic is the major pain area for our customers; and hence we made deep-packet inspection, a fundamental part of our security architecture and have developed proprietary technology, RFDPI [Reassembly-Free Deep Packet Inspection], which opens and checks every packet of data for threats. Our Capture technology has enabled us to proactively protect our customers from malware and ransomware attacks.

The annual threat report frames, compares and contrasts advances made by both cyber-security professionals and global cyber-criminals.

• Cyber attacks are becoming the No. 1 risk to businesses, brands, operations and financials
• 9.32 billion total malware attacks in 2017, an 18.4 percent year-over-year increase from 2016
• Ransomware attacks dropped from 638 million to 184 million between 2016 and 2017
• Ransomware variants, however, increased 101.2 percent
• Traffic encrypted by SSL/TLS standards increased 24 percent, representing 68 percent of total traffic
• Without SSL decryption capabilities in place, the average organization will see almost 900 attacks per year hidden by SSL/TLS encryption
• SonicWall identifies almost 500 new, previously unknown malicious files each day.

Security Industry Advances

Total ransomware attack volume declines

Even with WannaCry, Petya, NotPetya and Bad Rabbit ransomware attacks stealing the headlines, the expectations of more ransomware attacks simply did not materialize as anticipated in 2017. Full-year data shows that ransomware attacks dropped from 638 million to 184 million between 2016 and 2017.

• Volume marked a 71.2 percent drop from the 638 million ransomware attack events SonicWall recorded in 2016
• Regionally, the Americas were victimized the most, receiving 46 percent of all ransomware attack attempts in 2017
• Europe saw 37 percent of ransomware attacks in 2017
• SonicWall Capture Advanced Threat Protection [ATP], a cloud-based, multi-engine sandbox, identified one new malware variant for every 250 unknown hits

SSL/TLS use increases again

Web traffic encrypted by SSL/TLS standards made yet another significant jump in 2017. This shift has already given more opportunity for cyber-criminals and threat actors to hide malicious payloads in encrypted traffic.

• Encrypted SSL/TLS traffic increased 24 percent
• SSL/TLS traffic made up 68 percent of total traffic in 2017
• Organizations are beginning to implement security controls, such as deep packet inspection (DPI) of SSL/TLS traffic, to responsibly inspect, detect and mitigate attacks in encrypted traffic

Effectiveness of exploit kits impacted

With most browsers dropping support for Adobe Flash, no critical flash vulnerabilities were discovered in 2017. That, however, hasn’t deterred threat actors from attempting new strategies.

• SonicWall provided protection against Microsoft Edge attacks, which we observed grew 13 percent in 2017 over 2016

• SonicWall also protects the most popular Adobe products — Acrobat, Acrobat DC, Reader DC and Reader — and we observed attacks against these applications were down across the board

• New targeted applications [e.g., Apple TV, Microsoft Office] cracked SonicWall’s top 10 for the first time

Law enforcement turns the tide

Key arrests of cyber-criminals continued to help disrupt malware supply chains and impact the rise of new would-be hackers and authors.

• Law enforcement agencies are making an impact by arresting and convicting malware authors and disruptors
• Cyber-criminals are being more careful with how they conduct business, including dynamic cryptocurrency wallets and using different transaction currencies
• Cooperation between national and international law enforcement agencies is strengthening the disruption of global cyber threats

Cybercriminal Advances

More unique types of ransomware found in the wild

While the total volume of ransomware attacks was down significantly year over year, the number of ransomware variants created continues on an upward trend since 2015. The variant increase, coupled with the associated volume of 184 million attacks, leaves ransomware a prevelant threat. While several organizations in India believe that they are not adequately prepared to manage the attacks, there are few who are unaware of the process in case of ransomware attacks.

• Ransomware variants increased 101.2 percent in 2017
• SonicWall Capture Labs threat researchers created 2,855 new unique ransomware signatures in 2017, up from the 1,419 published in 2016
• Ransomware against IoT and mobile devices is expected to increase in 2018

SSL encryption still hiding cyber attacks
Hackers and cybercriminals continued to encrypt their malware payloads to circumvent traditional security controls. For the first time ever, SonicWall has real-world data that unmasks the volume of malware and other exploits hidden in encrypted traffic.

• Encryption was leveraged more than previous years, for both legitimate traffic and malicious payload delivery

• SonicWall Capture Labs found, on average, 60 file-based malware propagation attempts per SonicWall firewall each day
• Without SSL decryption capabilities in place, the average organization will see almost 900 file-based attacks per year hidden by TLS/SSL encryption

Malware cocktails mixing things up

While no single exploit in 2017 rose to the level of darknet hacker tools Angler or Neutrino in 2016, there were plenty of malware writers leveraging one another’s code and mixing them to form new malware, thus putting a strain on signature-only security controls. SonicWall Capture Labs uses machine-learning technology to examine individual malware artifacts and categorizes each as unique or as a malware that already exists.

• SonicWall collected 56 million unique malware samples in 2017, a slight 6.7 percent decrease from 2016
• Total volume of unique malware samples in 2017 was 51.4 percent higher than 2014

Chip processors, IoT are emerging battlegrounds

Cyber-criminals are pushing new attack techniques into advanced technology spaces, notably chip processors.

• Memory regions are the next key battleground that organizations will battle over with cyber-criminals
• Modern malware writers implement advanced techniques, including custom encryption, obfuscation and packing, as well as acting benign within sandbox environments, to allow malicious behavior to remain hidden in memory
• Organizations will soon need to implement advanced techniques that can detect and block malware that does not exhibit any malicious behavior and hides its weaponry via custom encryption

In addition to these findings, the 2018 SonicWall Cyber Threat Report also identified best practices and security predictions for 2018, which are discussed in detail in the full report. To download the complete report, please visit SonicWall Threat Report Link.