MUMBAI: The cyber police have arrested a web developer from Haryana who was allegedly providing VPS (virtual private server) to cyber scammers for a fee. VPS acts as a server with its own operating system, CPU and storage, and allows users to have a dedicated space for deploying applications or websites.Scammers, in turn, used the VPS for storing malicious APK (Android package kit) files that were subsequently sent to unsuspecting citizens and used to cheat them financially. The 32-year-old accused has a diploma in civil engineering. Police learnt of his role while investigating a case in Cuffe Parade where a senior citizen was cheated of Rs 17 lakh in a gas bill update scam.In July, a 75-year-old homemaker from Cuffe Parade received a call over WhatsApp from one Sanjay Mishra, who claimed to be a Mahanagar Gas Ltd employee. He said that the elderly woman’s previous bill payment had not been updated in the system. For the update, she was required to pay Rs 13. The elderly woman fell for the con and clicked on a link sent by Mishra.The link contained a malicious APK file, which got installed on her phone. The scammer gained access to her device. Shortly afterwards, the woman received a text alert from her bank about a sum of Rs 17.4 lakh debited from her account. She then dialled the cybercrime helpline ‘1930’ and complained. An FIR was registered at the South Region cyber police station on July 30. Investigators, under the supervision of DCP Bajrang Bansode, carried out a thorough technical analysis of the malicious APK file, which led them to the accused in Haryana. Police said he was providing VPS to individuals without carrying out a KYC (Know Your Customer). He has provided services to at least 1,100 individuals and was charging a fee of Rs 2,500 to Rs 5,000, depending on the size of files. Police suspect he was aware of the fraudulent activity on the VPS.The accused is currently lodged at Taloja Prison. His laptop and phone have been seized, and cyber investigators are analysing the data. Cybersecurity expert Nikhil Mahadeshwar said VPS providers must have strict abuse monitoring.
