The Ministry of Cyber Affairs

A Year of Unlimited Cellebrite Unlocks Costs About $100,000 to $120,000. Premium Unlimited and Inseyets Online Unlimited Unlocks are one subscription for a year of uncapped advanced unlocks. Two United States price records, a California renewal and three British records put that subscription in a band. Larger totals are usually more than one subscription.

SlowMist’s Bitget IR progress report (as of 29 Sep): Product A 0-day from 31 Aug, Product B admin abuse on 25 Sep, custom withdrawal tool forging risk controls, multi-chain drain ~2h52m from 02:31 UTC+8, later forged BTC withdrawal attempts. Private keys/cold wallets reportedly not compromised.

India’s Delhi Police AATS (West) raided a Naraina call centre named Veptra, arresting seven for fake Apple/iOS support scams targeting US residents via gift cards. Devices, cards and an Audi A3 seized. FIR 279/2026.

India’s Enforcement Directorate arrested Syed Usman alias Babu and Dhamodharan Balachandran in the Hashpe cryptocurrency fraud PMLA probe. Alleged proceeds ~₹146 crore via cash, Hify Circle bank credits and purported TCX tokens. Source: ED.

UP Police rescued an 18-year-old in Bareilly within 10 minutes after Meta flagged his Instagram self-harm post and alerted the force’s Social Media Centre. Brief on how Meta’s suicide-risk warning system works with police. Source: @Uppolice.

Europol is hiring a Senior Specialist – Head of Team – Cybercrime Investigations Support (AD8) at EC3 in The Hague. Restricted Temporary Agent post; reserve list for Q4 2026/Q1 2027. Apply online by 22 October 2026, 23:59 CEST: europol.europa.eu vacancy 1088.

Kolkata Police report that an inquiry into fraudulent SIM procurement uncovered a multi-state cyber-fraud operation. Following the arrest of Taushif Alam on 17 September 2026, officers raided a flat in Hatiara under Eco Park Police Station used as an alleged fraudulent call centre, arresting seven individuals from Andhra Pradesh and Telangana. The accused are alleged to have impersonated MUDRA Loan representatives and induced residents of Andhra Pradesh to transfer funds. Mobile phones and noteb

UP Police say Bhadohi Police arrested three people accused of forging birth certificates by misusing officials’ CRS portal logins — allegedly via OTPs, email takeover, and uploads of fake data or blank papers. The force claims about 200–250 fake certificates were produced for illegal gain. Official post names no FIR or accused; local press same day aligns on the CRS/OTP modus.

NCCIA Rawalpindi raided an alleged illegal call centre in Commercial Market, Satellite Town, arresting 61 suspects and seizing 155 laptops and 71 phones (28 Sep 2026). Officials say preliminary findings point to illegal foreign-loan recovery with threats and intimidation of customers abroad.

Uttarakhand STF says it dismantled an illegal SIM-box telecom gateway in Bazpur, Udham Singh Nagar, arrested a 24-year-old man and seized two 32-slot SIM boxes, 77 antennas, 114 Airtel SIM cards, a router, phone and other equipment. Investigators allege foreign/VoIP calls were converted into Indian local calls to conceal identities, with links to Bangladesh-based cybercriminals under investigation.

Pakistan’s NCCIA says its Karachi office raided two alleged fraud call centres in PECHS Block 6, Tariq Road, found 73 individuals and seized a live CRM plus digital evidence. FIRs 92/2026 and 93/2026 registered; one operator arrested, two declared absconders. Follows the recent Lahore DHA Phase 6 raid (21 arrests).

NCCIA Lahore and Faisalabad teams raided an alleged illegal scam centre in DHA Phase 6, Lahore, arresting 21 people and recovering 29 mobile phones and 10 PCs. The agency said preliminary examination indicated the alleged use of fake social media accounts.

After storms and wildfires, scammers pose as FEMA staff, charities and contractors. The FTC's warning signs, how to verify help, and where to report fraud.

DentaQuest says at least 15 million people were hit by a breach claimed by ShinyHunters. How to guard against medical identity theft and fraud right now.

IDScan disclosed a breach after a dark-web service claimed 153M+ US and Canadian licenses. How to protect yourself: freezes, your DMV, an IRS IP PIN and more.

Scammers are impersonating the FBI's IC3 with Telegram messages and AI deepfake videos to re-target fraud victims. How it works and how to report safely.

Perplexity CEO Aravind Srinivas said nine models with root in SPACE failed 108 VM→host escapes, but four — including GPT-5.6 Cyber — reached a blocked URL under partial network access via DNS spoofing or shared-IP CDN tricks; Cyber used Taboola→screenshot→OCR. Issues reportedly fixed. Not a Firecracker host break.

Automated scrapers and path scanners routinely probe public sites for /.env, config.json, info.php, .vscode/sftp.json, cPanel proxy paths, GraphQL and Exchange ECP URLs. MoCA analysis of typical top-path charts explains recon vs exploit risks and practical fixes: deny rules, WAF, fail2ban, never commit secrets, remove phpinfo, and keep security.txt intentional.

From an unpaid exam lab in Greater Noida to a soldering station in Delhi — UP STF says it has busted a pan-India supply chain that let remote solvers control candidates' computers.

A laptop farm is not a hacking exploit. It is physical infrastructure designed to hide where the keyboard actually is.