Cybersecurity is not just an IT issue; it has evolved into a complex, specialized field requiring dedicated professionals

Prof. Triveni Singh, Ex-IPS, Chief Mentor- Future Crime Research Foundation

“Emerging technologies present both opportunities and threats. While businesses in the corporate sector leverage these technologies for growth and efficiency, criminals exploit them to commit crimes. For example, in the realm of AI, criminals were quick to adopt AI for nefarious purposes. They use AI to craft convincing emails and letters that are difficult to distinguish from genuine ones, unlike in the past when spelling errors and syntax mismatches were clear indicators of fake emails.

With 30 years in law enforcement, including 15 years investigating cybercrime, I’ve encountered numerous cases where emerging technologies were misused. One such technology is Voice over Internet Protocol (VoIP). Originally designed to enhance privacy and business communication, cybercriminals use VoIP to create virtual numbers, enabling them to impersonate others and commit crimes. This misuse extends to email, where criminals can send fake emails that appear genuine to the untrained eye.

AI also introduces the threat of voice cloning. Criminals use AI-based tools to clone voices, leading to thousands of fraud cases reported globally. This misuse highlights how quickly criminals adopt new technologies. For instance, when we introduced an online examination system in Uttar Pradesh, criminals immediately used remote access tools (RAT) to compromise the system. They installed RAT on computers, allowing solver gangs in Mumbai to access students’ terminals and solve exam questions remotely.

Security practices need to be strictly observed and implemented by the government and financial institutions. There is often a lack of awareness about information security practices, even among senior bank officers. Many are unaware of the directives issued by regulatory bodies like the RBI or IRDAI regarding cybersecurity. This gap in knowledge and practice makes systems vulnerable to attacks.