Blog

A case of unauthorized surveillance was reported in Gurugram, where a domestic worker allegedly installed a spy camera in a woman’s residence for the purpose of blackmail. The individual, identified as Shubham Kumar, reportedly placed the device in the victim’s bedroom while employed as domestic help. After obtaining compromising footage, Kumar attempted to extort Rs 2 lakh, threatening to release the recordings if the demand was not met.According to police reports, the woman had hired Kumar through a placement agency. As part of his employment, he was allowed to stay in the residence, providing him with an opportunity to install a hidden recording device in the bedroom. The device remained undetected until the woman discovered it while cleaning. She immediately terminated Kumar’s employment but did not initially report the incident due to reputational concerns.The situation escalated when Kumar attempted to leverage the footage for financial gain. Upon receiving threats of exposure, the victim reported the matter to law enforcement.To reduce exposure to unauthorized surveillance, individuals and organizations should implement the following measures:Training on Consumer-Grade Surveillance Devices: Awareness programs should be conducted to educate individuals on the identification of commonly used covert surveillance equipment. Regular Technical Surveillance Countermeasures (TSCM) Sweeps: UHNWIs and high-risk individuals should implement TSCM sweeps at a cadence determined by risk factors such as staff turnover, visitor access, and nature of sensitive discussions held within the premises. Referenceshttps://www.news18.com/india/gurugram-woman-accuses-help-of-filming-her-using-spy-cameras-7812067.html

Case Study: Domestic Espionage in Gurugram – Spy Camera Placed by Domestic Help

Case Study: Cybercrime Involving Fake Wi-Fi Networks at Australian Airports and on Domestic FlightsA 42-year-old man from Western Australia has been charged after allegedly setting up fake Wi-Fi networks at airports and on domestic flights to steal personal data from unsuspecting passengers. The man created “evil twin” Wi-Fi networks that mimicked legitimate free networks, tricking users into connecting. Once connected, passengers were redirected to a fake login page asking for email or social media credentials, which were then captured for further misuse.The fake networks appeared at Perth, Melbourne, and Adelaide airports, as well as on domestic flights. The authorities became aware of the situation after staff on a domestic flight raised concerns about a suspicious network. The man was arrested after a search of his baggage revealed devices used in setting up the malicious Wi-Fi networks.Police allege that the stolen personal information, including login credentials and financial data, was saved on the man’s devices for later use. He has been charged with multiple cybercrimes, including unauthorized access to data and fraud.Best Practice: To avoid falling victim to similar attacks, avoid connecting to public Wi-Fi networks, as they may be fake or insecure. Instead, use a personal hotspot from your mobile device, which offers a much safer connection and reduces the risk of data theft.

Case Study: Cybercrime Involving Fake Wi-Fi Networks at Australian Airports and on Domestic Flights

Case Study: Huawei’s Espionage Against Ericsson in CopenhagenHuawei demonstrated its sophisticated espionage capabilities in Copenhagen, where it is reported to have targeted Ericsson with eavesdropping devices in a bid to secure a $200M contract with Denmark’s TDC.The incident allegedly involved the covert planting of eavesdropping devices in Ericsson’s boardroom to secretly capture sensitive discussions. This allowed Huawei to adjust its bid strategically and undercut Ericsson’s pricing, ultimately securing the contract. TDC, however, became suspicious of the last-minute price reduction and initiated an internal investigation.As part of the investigation, a Technical Surveillance Countermeasures (TSCM) sweep was conducted in Ericsson’s boardroom. The inspection uncovered hidden microphones, confirming the suspicions of sensitive information theft which led to Huawei gaining a strategic advantage to win the contract.Huawei, a company with past accusations of links to the Chinese government, has faced growing international scrutiny in other espionage cases as they have been accused of being at the intersection of corporate espionage and state-driven interests. This likely reflects a broader trend by Chinese firms, reportedly backed by the state, to launch espionage campaigns to gain a strategic advantage or steal intellectual property related to technology.To protect against these types of threats, organizations should consider adopting a risk-based approach to securing sensitive information. In this case, Ericsson could have mitigated the risk by conducting a risk assessment ahead of the sensitive discussions, which would have considered Huawei’s potential interest in acquiring confidential information.A TSCM sweep of the boardroom prior to discussions involving sensitive data could have helped identify any eavesdropping devices or vulnerabilities, significantly reducing the risk of information theft.

Case Study: Huawei’s Espionage Against Ericsson in Copenhagen

Considering TSCM as Part of Your Risk Management StrategyConsideration of corporate espionage and its potential impacts should be an integral part of risk management and business strategy. Being in a position where an organization can confidently promote that it has considered every eventuality is a proactive step that not only ensures corporate compliance but also aids in acquiring new business from increasingly security-conscious corporate clients, while offering an added sense of comfort to existing clients.6 Benefits of TSCM at a GlancePrevention The potential loss and reputational damage resulting from an information breach can far outweigh the cost of implementing a proactive TSCM strategy. Prevention is always better than cure.Best Practice Having a proactive TSCM program in place demonstrates a best practice approach that will reassure board members, clients, the supply chain, and stakeholders.Corporate Compliance and Responsibility The duty to identify and manage regulatory risk is a critical responsibility for today’s boards, and a proactive TSCM program will help organizations achieve compliance in protecting sensitive information.Enhanced Security A TSCM program will detect and address physical security vulnerabilities that could allow unauthorized access to your premises, thereby enhancing the overall security of the organization.Deterrent Clear counter-surveillance policies can act as a deterrent to thieves, competitors, and rogue employees.Peace of Mind With a proactive TSCM program in place, you can have peace of mind knowing your conversations and information will remain confidential, allowing you to focus on business as usual.

Blog

Case Study: Domestic Espionage in Gurugram – Spy Camera P...

Case Study: Cybercrime Involving Fake Wi-Fi Networks at A...

Case Study: Huawei’s Espionage Against Ericsson in Copenh...

Considering TSCM as Part of Your Risk Management Strategy