Cyber Crimes, Frauds & Alerts - UPSC Key Notes & Top 15 MCQs

Cybersecurity is the collective practice of defending computers, servers, mobile devices, electronic systems, networks, and data from malicious digital attacks. These measures are deployed by individuals and organizations to ensure the safety and integrity of information technology resources. Protecting against unauthorized access is crucial in our highly interconnected digital infrastructure.

The necessity of strong security protocols has grown exponentially due to the increasing reliance on digital systems globally. Effective cybersecurity helps in safeguarding sensitive personal, governmental, and financial data against threats like theft, destruction, or alteration. It is a dynamic field constantly evolving to counter sophisticated cybercrime tactics.

How is "Cryptocurrency" relevant for UPSC & Other Exams?

Cybersecurity is a high-priority topic for competitive exams like UPSC, SSC, and Banking (IBPS, SEBI, RBI). It features prominently under Science & Technology, Internal Security, and Governance syllabi. Questions often cover national policy (like CERT-In), data protection laws, emerging threats such as ransomware, and the need for robust digital infrastructure protection against state and non-state actors.

Quick Revision Notes - Cybercrimes

Keyword Definitions (UPSC / SSC / RRB / SEBI / IBPS / NDA Exams)

• Malware: This term refers to any software intentionally designed to cause disruption, damage, or gain unauthorized access to a computer system, often encompassing viruses, worms, and Trojan horses. Malware functions stealthily to compromise system integrity or steal valuable user data.
• Phishing: A dangerous social engineering technique where attackers send deceptive communications, usually emails, designed to trick recipients into revealing sensitive information like usernames, passwords, and credit card details by mimicking a trustworthy entity.
• Ransomware: A highly destructive class of malicious software that blocks user access to their own computer system or files, typically through strong encryption, demanding a substantial ransom payment, usually in cryptocurrency, to restore functionality.
• Firewall: A fundamental network security system that establishes a barrier between a trusted internal network and untrusted external networks, such as the internet, meticulously filtering and controlling traffic based on a predefined set of security rules.
• Encryption: The cryptographic process of encoding sensitive information, transforming readable data (plaintext) into an unintelligible, scrambled form (ciphertext), ensuring that only authorized parties holding the decryption key can access and understand the original content.
• Zero-Day Vulnerability: This is a serious software or hardware flaw that is unknown to the vendor and has no publicly available patch or security fix, giving malicious attackers a 'zero-day' window of opportunity to exploit the weakness before defenses are created.
• DDoS Attack: A Distributed Denial of Service attack attempts to disrupt the normal traffic of a targeted server, service, or network by overwhelming the target with a flood of illegitimate internet traffic originating from multiple compromised computer systems.
• Cloud Security: This involves a set of policies, technologies, applications, and controls deployed to protect cloud-based infrastructure, data, and applications from cyber threats, ensuring compliance and meeting stringent regulatory security requirements.
• Intrusion Detection System (IDS): A sophisticated security measure that monitors a network or system for malicious activities or policy violations. Upon identifying suspicious activity, the IDS generates an alert to the security team for immediate investigation and response.
• Social Engineering: A manipulation technique that exploits human psychology, often tricking people into divulging confidential information or performing actions that compromise security, relying on trust rather than technical hacking methods to breach defenses.
• Digital Signature: A mathematical technique used to validate the authenticity and integrity of a digital document or message. A valid digital signature gives a recipient strong assurance that the message was created by a known sender and has not been tampered with.
• Public Key Infrastructure (PKI): This is a set of roles, policies, hardware, software, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates, fundamentally supporting the robust verification required for asymmetric cryptography.

Message to Students

Stay focused and resilient! Cybersecurity is a dynamic subject, so consistent review of core concepts and current global events is the key to mastering these MCQs. You are well-prepared to tackle these questions!

Multiple Choice Questions (MCQs) - Cybersecurity 

Section A: Straight MCQs (5 Questions)

1. Which principle of the CIA Triad ensures that information is accurate and has not been improperly modified or destroyed by unauthorized parties?

a) Confidentiality
b) Integrity
c) Availability
d) Non-repudiation

Expand for Answer & Explanation

**Answer: b) Integrity**

Integrity is crucial in information security, guaranteeing data accuracy and completeness throughout the entire life cycle. It prevents unauthorized modification of data, ensuring trustworthiness for the user effectively.

2. Which term describes malicious software that replicates itself and spreads to other computers without requiring user action or a host program?

a) Virus
b) Trojan Horse
c) Spyware
d) Worm

Expand for Answer & Explanation

**Answer: d) Worm**

Worms are standalone malicious programs that primarily focus on self-replication and rapid dissemination across network connections, often consuming system resources quickly and efficiently.

3. The Indian Computer Emergency Response Team (CERT-In) operates under the purview of which Union Ministry?

a) Ministry of Home Affairs
b) Ministry of Electronics and Information Technology (MeitY)
c) Ministry of Communications
d) Ministry of Defence

Expand for Answer & Explanation

**Answer: b) Ministry of Electronics and Information Technology (MeitY)**

CERT-In is the national nodal agency for computer security incidents, operating under MeitY. It responds to threats, issues advisories, and coordinates responses across government and private sectors effectively.

4. A firewall that can inspect the entire context of a network session from start to finish is known as a:

a) Packet-Filtering Firewall
b) Application-Layer Gateway
c) Stateful Inspection Firewall
d) Proxy Server

Expand for Answer & Explanation

**Answer: c) Stateful Inspection Firewall**

Stateful firewalls track the state of active connections, making filtering decisions based on the connection's context and history, thus offering much stronger security than simple packet filters.

5. Which type of cryptography uses a single, shared secret key for both encrypting the plaintext and decrypting the resulting ciphertext?

a) Asymmetric Cryptography
b) Hash Functions
c) Symmetric Cryptography
d) Public Key Infrastructure (PKI)

Expand for Answer & Explanation

**Answer: c) Symmetric Cryptography**

Symmetric cryptography uses algorithms like AES and DES. It is extremely fast and efficient for bulk data encryption, relying completely on the safe exchange and secrecy of the single key.

Section B: Conceptual MCQs (4 Questions)

6. A security system designed to act as a decoy to lure cyber attackers and study their methods without risking the actual production network is called a:

a) Sandbox
b) Honeypot
c) Virtual Machine
d) Intrusion Prevention System (IPS)

Expand for Answer & Explanation

**Answer: b) Honeypot**

Honeypots are intentionally vulnerable resources deployed to attract, trap, and gather information about hostile threats and attack patterns, thereby strengthening genuine network defenses effectively.

7. Cross-Site Scripting (XSS) attacks exploit vulnerabilities primarily in which layer of the web application communication model?

a) Server-side database
b) Application server logic
c) Client-side browser rendering
d) Network transport layer (TCP/IP)

Expand for Answer & Explanation

**Answer: c) Client-side browser rendering**

XSS involves injecting malicious scripts into a web page, which are then executed by an unsuspecting user's browser, leading to session hijacking or unauthorized data collection effectively.

8. Which legal framework in India primarily deals with cybersecurity, electronic commerce, and provides a framework for digital signatures?

a) Indian Penal Code (IPC)
b) Information Technology Act, 2000
c) Data Protection Act, 2019
d) National Security Act, 1980

Expand for Answer & Explanation

**Answer: b) Information Technology Act, 2000**

The IT Act, 2000, and its subsequent amendments, define cybercrimes, allocate legal recognition to electronic records, and establish the regulatory framework for technology use in India effectively.

9. Which of the following best describes the principle of 'Non-repudiation' in secure communication?

a) Ensuring data is only viewable by authorized personnel.
b) Guaranteeing that data is not altered during transit.
c) The sender cannot later deny having sent the message.
d) The system must be operational when needed by users.

Expand for Answer & Explanation

**Answer: c) The sender cannot later deny having sent the message.**

Non-repudiation is achieved using digital signatures and prevents an individual from falsely denying that they originated a communication, thereby ensuring legal accountability and trust.

Section C: Advanced MCQs (2 Questions)

10. What is a 'Buffer Overflow' attack designed to achieve in a target system?

a) Steal encrypted hash values from the database.
b) Exploit poor input validation to flood a memory buffer.
c) Redirect users to malicious websites via phishing.
d) Perform unauthorized transactions through session hijacking.

Expand for Answer & Explanation

**Answer: b) Exploit poor input validation to flood a memory buffer.**

A buffer overflow occurs when a program writes more data to a memory area than it can hold, leading to system crash or enabling an attacker to execute arbitrary code effectively.

11. Which organization is responsible for coordinating the protection of India’s Critical Information Infrastructure (CII)?

a) National Security Council Secretariat (NSCS)
b) National Technical Research Organisation (NTRO)
c) National Critical Information Infrastructure Protection Centre (NCIIPC)
d) Defence Research and Development Organisation (DRDO)

Expand for Answer & Explanation

**Answer: c) National Critical Information Infrastructure Protection Centre (NCIIPC)**

NCIIPC is mandated to take measures necessary to protect CII across critical sectors like banking, power, and transport, ensuring their continuous and resilient operation effectively.

Section D: Assertion-Reason MCQs (2 Questions)

12. Consider the following statements:
Assertion (A): Patch management is a crucial aspect of proactive cybersecurity for all operating systems and software.
Reason (R): Applying patches eliminates known vulnerabilities that could otherwise be exploited by attackers using readily available exploit tools.

a) Both A and R are true, and R is the correct explanation of A.
b) Both A and R are true, but R is not the correct explanation of A.
c) A is true, but R is false.
d) A is false, but R is true.

Expand for Answer & Explanation

**Answer: a) Both A and R are true, and R is the correct explanation of A.**

Patching software is the primary way to fix security flaws discovered post-release. This proactive measure prevents vast majority of attacks that rely on known, unpatched vulnerabilities effectively.

13. Consider the following statements:
Assertion (A): The principle of least privilege (PoLP) is a core component of strong identity and access management (IAM).
Reason (R): PoLP ensures that users and systems are granted only the minimum access rights necessary to perform their required job functions and nothing more.

a) Both A and R are true, and R is the correct explanation of A.
b) Both A and R are true, but R is not the correct explanation of A.
c) A is true, but R is false.
d) A is false, but R is true.

Expand for Answer & Explanation

**Answer: a) Both A and R are true, and R is the correct explanation of A.**

PoLP reduces the attack surface by limiting potential damage if an account is compromised. This principle is fundamental to managing and controlling digital identities and access effectively.

Section E: Matching Type MCQs (2 Questions)

14. Match the Cyberattack Type (List I) with its primary objective (List II):

List I (Attack Type)	List II (Objective)
A. Pharming	(i) Stealing credentials by hijacking DNS resolution to a fake site.
B. Side-Channel Attack	(ii) Gaining access to private cryptographic keys via power consumption analysis.
C. Smishing	(iii) Defacing a website's main page or home page publicly.
D. Web Defacement	(iv) Social engineering conducted via deceptive text messages (SMS).
Options: a) A-i, B-ii, C-iv, D-iii b) A-ii, B-iii, C-i, D-iv c) A-iv, B-i, C-iii, D-ii d) A-iii, B-iv, C-ii, D-i

Expand for Answer & Explanation

**Answer: a) A-i, B-ii, C-iv, D-iii**

Pharming hijacks DNS. Side-channel attacks use physical leakage like power usage to infer data. Smishing uses SMS messages. Web defacement publicly alters the website's appearance effectively.

15. Match the Security Measure (List I) with the CIA Triad Principle it primarily addresses (List II):

List I (Measure)	List II (Principle)
A. Data Backups & Redundancy	(i) Integrity
B. Encryption & Access Control	(ii) Availability
C. Hashing & Digital Signatures	(iii) Confidentiality
D. Disaster Recovery Planning	(iv) Availability
Options: a) A-ii, B-iii, C-i, D-iv b) A-i, B-ii, C-iv, D-iii c) A-iv, B-i, C-ii, D-iii d) A-iii, B-iv, C-ii, D-i

Expand for Answer & Explanation

**Answer: a) A-ii, B-iii, C-i, D-iv**

Backups and Recovery address Availability. Encryption ensures Confidentiality. Hashing verifies Integrity. Disaster Planning, though broad, guarantees continued Availability after disruptive events effectively.

---

Watch Video: How to Solve MCQs

Struggling with Cybersecurity MCQs? Watch this video to master the Elimination Method, solve tricky questions accurately, and score 10/10 in your UPSC and SSC exams!

Final Message for Aspirants: UPSC Mains Focus

The conceptual clarity gained from these MCQs will significantly aid in writing comprehensive answers for the UPSC Mains examination. Focus on the policy, governance, and threat mitigation aspects.

Top 10 Facts About Cybersecurity & Cyber Fraud

Top 10 Guessed Short Questions for UPSC Mains - Cybercrimes

1. Q: Discuss the significance of the IT Act, 2000, in addressing contemporary cybercrimes in India.
   A: The IT Act provides the legal framework for cyber-jurisprudence, defining digital signatures, electronic contracts, and various cybercrimes. It empowers law enforcement to prosecute offenses like hacking, data theft, and phishing, remaining vital for digital governance. 
2. Q: What are the major challenges faced by CERT-In in coordinating cyber defense across different sectors?
   A: Key challenges include inconsistent security standards across sectors, limited skilled manpower, sophisticated evolving threats, and complexities in timely cross-border cooperation necessary for effective cyber threat mitigation. Resource allocation remains a constant struggle for the agency. 
3. Q: Explain the 'Zero Trust' security model and why it is replacing traditional perimeter-based security.
   A: The Zero Trust model mandates verification for every user and device trying to access network resources, regardless of location. It replaces traditional perimeter defenses because threats often originate internally, requiring strict verification for both internal and external traffic. 
4. Q: Define Data Localisation. What are its implications for India's digital economy?
   A: Data Localisation requires storing data locally within a country's boundaries. It promises better regulatory oversight, enhanced national security, easier data access for law enforcement, and potentially boosts local data center infrastructure and employment opportunities. 
5. Q: How can Blockchain Technology be leveraged to enhance cybersecurity besides cryptocurrency?
   A: Blockchain enhances security by providing immutable, distributed ledger technology for secure and transparent identity management, decentralized domain name systems, and auditable supply chain tracking, fundamentally increasing data integrity and trustworthiness across multiple applications. 
6. Q: What is Cyber Warfare, and how does it pose a threat to critical national infrastructure (CNI)?
   A: Cyber warfare involves state-sponsored digital attacks targeting another nation's CNI, such as power grids, financial systems, or defense networks. It can cause massive economic damage, widespread service disruption, and potentially paralyze essential governance functions, posing a severe national security threat. 
7. Q: Briefly explain Deepfake technology and the ethical and security concerns it raises.
   A: Deepfake uses artificial intelligence to generate highly realistic, synthetic video or audio content manipulating a person's image or voice. It raises serious concerns regarding digital fraud, political misinformation, reputation damage, and the rapid erosion of public trust in authentic visual and audio evidence. 
8. Q: Differentiate between Spear Phishing and Whaling in the context of social engineering.
   A: Spear Phishing is a personalized attack targeting a specific individual or organization, while Whaling is a highly specialized phishing attempt aimed at senior executives or high-profile individuals (whales). Both rely on targeted deceit but differ in the level of the target. 
9. Q: What role does Behavioural Biometrics play in modern fraud detection?
   A: Behavioural biometrics analyzes unique patterns of user interaction, such as typing speed, mouse movements, and navigation habits, rather than static physical traits. It continuously detects anomalies indicative of an account takeover, offering a non-intrusive, real-time layer of fraud prevention. 
10. Q: Discuss the challenge of the Cyber Security Skill Gap in India and suggest two government initiatives to address it.
    A: India faces a critical shortage of skilled cyber security professionals to defend its rapidly growing digital ecosystem. Initiatives like the National Cyber Security Strategy and promoting specialized digital forensics training in academic institutions are essential to close this widening skill deficit promptly. 

Advanced Reading - Cybersecurity

Top 10 Cybercrimes, Frauds & Alerts for UPSC Exams with Key Preventive Measures – Infographic for Quick Revision

🎧 Listen to The Story & Article

In today’s digital era, cyber crimes and online fraud pose serious threats to personal and financial security. UPSC aspirants must understand key risks like phishing, malware, weak passwords, public Wi-Fi dangers, social engineering, ransomware, and data breaches. Awareness of preventive measures such as strong passwords, two-factor authentication, software updates, encrypted communication, and prompt reporting is crucial for safeguarding sensitive information. This article summarizes the top 10 points and provides MCQs for UPSC preparation, helping aspirants quickly grasp cybersecurity threats, protective strategies, and critical alerts for examinations and real-life applications.

A Mumbai Senior Woman Lost ₹2.89 Crore to Cyber Criminals Recently

A 73-year-old woman from Mumbai recently endured a terrifying ordeal when she fell prey to cyber criminals posing as high-ranking officials. The fraudsters, using WhatsApp calls, introduced themselves as representatives of the Telecom Regulatory Authority of India. They claimed her bank account was involved in suspicious transactions.

Soon after, another caller pretending to be a police officer warned her that her name had surfaced in a fraud investigation linked to a businessman. He threatened that she could face a “digital arrest,” a term unfamiliar to her but presented convincingly. Shocked and desperate to avoid trouble, she was told that a judge would intervene through a video call. Believing she was interacting with real authorities, the woman followed their instructions and transferred money multiple times over three days, amounting to Rs 2.89 crore.

Once the reality dawned on her, she immediately contacted the cybercrime helpline number 1930. The case was quickly registered on the National Cybercrime Reporting Portal. Thanks to swift coordination by the cyber cell, Rs 1.29 crore was traced and recovered from the transferred amount. While the financial loss remains heavy, the recovery brought some relief, and the case stands as a grim reminder of sophisticated online scams.

Cyberthreats

Online data theft occurs when cybercriminals illegally access your personal information, including passwords, banking details, and private messages, often through phishing, malware, or insecure networks.

Type of Cyber Threat	Description
Phishing Scams	Fake emails or messages trick users into sharing sensitive info like passwords or bank details.
Malware & Viruses	Malicious software secretly records keystrokes and steals personal or financial data.
Weak Passwords	Simple or reused passwords make accounts easy to hack or brute-force.
Public Wi-Fi Risks	Attackers intercept data on open Wi-Fi networks, exposing personal information.
Social Engineering	Hackers trick people through deceptive calls or messages to reveal confidential info.
Data Breaches	Hackers steal user data from company databases for sale or misuse.
Spyware & Keyloggers	Hidden tools record keystrokes and capture sensitive data for theft.

.

Infographic Image Showing 7 ways How Online Data Theft Happens - Cybersecurity

How to Protect Yourself from Online Data Theft & Cyber Fraud

Online data theft is becoming increasingly common. Protecting your personal information requires vigilance, smart practices, and understanding common cybersecurity threats.

1. Use Strong, Unique Passwords: Create long, complex passwords with a mix of letters, numbers, and symbols for each account. Avoid easily guessable personal details like birthdays or names.

2. Enable Two-Factor Authentication: Add an extra security layer requiring a verification code from your phone or email. This prevents unauthorized access even if passwords are compromised.

3. Beware of Phishing Scams: Do not click suspicious links or download attachments from unknown emails. Always verify the sender’s identity before sharing personal or financial information online.

4. Keep Software Updated: Regularly update operating systems, apps, and antivirus programs. Security patches often fix vulnerabilities that hackers exploit to steal sensitive data and compromise devices.

5. Secure Your Wi-Fi Network: Use strong passwords and encryption for home or public Wi-Fi. Avoid using unsecured networks for banking, shopping, or sharing sensitive personal information.

6. Use a Password Manager: Store and generate complex, unique passwords for every account. Password managers reduce the risk of password reuse and make secure login easier and faster.

7. Monitor Accounts Regularly: Frequently check bank statements, credit reports, and online accounts for suspicious activity. Early detection helps prevent large-scale theft or identity fraud.

8. Be Careful with Public Devices: Avoid logging into personal accounts on public computers or shared devices. Clear all caches, history, and passwords if you must access accounts.

9. Limit Data Sharing on Social Media: Avoid posting sensitive information like addresses, phone numbers, or travel plans publicly. Cybercriminals can use these details for identity theft.

10. Use Encrypted Communication: Use secure apps and websites with HTTPS for online transactions. Encrypted messaging and email prevent hackers from intercepting your personal or financial information.

11. Don't Click Unknown Links: Avoid clicking links from unknown or suspicious sources. Verify the sender before sharing sensitive info.

12. Update Apps Regularly: Keep mobile OS and apps updated. Install security apps that detect malware or phishing attempts.

Infographic Image Showing 12 Ways to Protect Yourself from Online Data Theft

Watch Video: Cyber Crimes, Frauds & Alerts for UPSC:  

Conclusion:

Online data theft is a growing threat that targets personal, financial, and sensitive information through methods such as phishing, malware, weak passwords, public Wi-Fi, and social engineering. By practicing strong cybersecurity habits—such as using unique passwords, enabling two-factor authentication, monitoring accounts, avoiding suspicious links, and keeping devices updated—individuals can significantly reduce their risk. Staying vigilant and informed is the key to protecting personal data in today’s digital world.

Online Courses, Reference Books, & Websites

Category	Resources
Online Courses	Introduction to Cyber Security – Coursera Cybersecurity Fundamentals – edX Data Privacy and Protection – Udemy
Reference Books	Cybersecurity Essentials – William Stallings Hacking: The Art of Exploitation – Jon Erickson Data Privacy Handbook – Lee Tien
Websites	National Cyber Crime Reporting Portal – Cybercrime Portal Cybersecurity & Infrastructure Security Agency – cisa.gov OWASP – owasp.org