The four hackers in police custody.
The four hackers in police custody.

Delhi hackers, digital shoplifters who tampered data of e-commerce portals

Four young hackers have been arrested for allegedly digitally shoplifting vouchers worth Rs92 lakh by tampering with the data of e-commerce websites at the payment gateway stage
By Shiv Sunny | Hindustan Times, New Delhi
UPDATED ON JAN 25, 2017 11:01 PM IST

Four young hackers have been arrested for allegedly digitally shoplifting vouchers worth Rs92 lakh by tampering with the data of e-commerce websites at the payment gateway stage. Two of them are BTech dropouts, one is pursuing engineering while the other is a BCA from Delhi University, police said.

Calling it the first such case reported from the national capital, DCP (south) Ishwar Singh said these hackers used these vouchers at popular e-commerce sites such as MakeMyTrip, Flipkart, Amazon, Dominos Pizza, Myntra and Shoppers Stop, among others, said police.

To avoid being tracked, the accused never lived in any place for more than a day or two, but they spent their time putting up at five star hotels, travelling by expensive flights and splurging on their girlfriends.

They would ‘show-off’ their lavish lifestyle and offer expensive laptops and mobile phones for dirt-cheap to their friends on a social media website.

To come across as well-off persons, the four would hire cars like Mercedes and BMW while travelling with their girlfriends, said the DCP on Wednesday.

The three 18-year-old arrested youths, led by the alleged mastermind, Sunny Nehra, had allegedly undergone extensive training in hacking and had tied up with professional hackers in India, Netherlands and Indonesia to learn the tricks of the trade.

“They had obtained special softwares that helped them go about their job. They even had a Dell laptop of 256 GB RAM configuration capable of supporting a particular hacking suite,” said an investigator.

Nehra, a BTech dropout student, had obtained an additional expertise in looking for vulnerabilities in online payment sites. A few months ago, one of his hacker friends informed him that PayU, a payment gateway, was suffering from vulnerability and could be tested for “data tampering”, said the DCP.

Nehra studied the website and soon realised that it allowed changes in parameters at the processing page. He then targeted a website gyftr.com from where one can buy vouchers.

Read more: Websites of 7 Indian missions ‘hacked’, data allegedly put online

Explaining the modus operandi, Singh said, Nehra and his friends would first opt for a purchasing an e-voucher from the website. Using credit or debit cards obtained on fake documents, the hackers would enter the card details and make the payment using the PayU payment gateway.

Once the payment was being processed, one is generally led to a page that asks not to ‘refresh’, ‘cancel’ or ‘go back’ until the payment is through.

It is at this particular point that these hackers would press the cancel button to “freeze” the page. Using their hacking skills, they would change certain values before again proceeding with the payment.

Read more: Legion: Meet the hackers who broke into Rahul, Barkha Dutt’s Twitter accounts

For example, if they were purchasing a voucher worth Rs5,000, they would edit the value to just Re1. Since they had already decoded the source codes of that page during the experimentation stage in the past, they were able to make the payment go through.

While the hackers then used these vouchers to buy products and services from different websites, the portal offering the vouchers was duped.

It was on December 30, 2016, that representatives of an e-commerce website that administers the website gyftr.com approached Hauz Khas police with a complaint that they had been duped of vouchers worth Rs92 lakh.

A special team constituted to crack the case obtained records from the portals whose services were used. That helped police identify certain iPhones and iPads that were purchased by the accused. “The IP addresses of these devices were tracked, leading police to the Facebook profile of Nehra,” said the DCP.

He was finally traced to a five star hotel in Gurgaon where he had been staying. At his instance, his friends too were nabbed.

SHARE THIS ARTICLE ON
app
Close
Trudeau was the first world leader to comment on the farmers’ protest, telling a Facebook video interaction on Tuesday that the situation in India was “concerning”.(PTI)
Trudeau was the first world leader to comment on the farmers’ protest, telling a Facebook video interaction on Tuesday that the situation in India was “concerning”.(PTI)

As farmers' protest continues, Delhi Police bolster border security

By HT Correspondent, Hindustan Times, New Delhi
PUBLISHED ON JAN 23, 2021 02:36 PM IST
The farmers alleged that the Haryana police have planted some men among the protesters to fuel violence at the protest site.
Close
The minimum temperature rose to eight degrees Celsius as a result of easterly winds and a cloud cover over the national capital, an IMD official said.(Raj K Raj / HT Photo)
The minimum temperature rose to eight degrees Celsius as a result of easterly winds and a cloud cover over the national capital, an IMD official said.(Raj K Raj / HT Photo)

Delhi's minimum temperature rises to 8 degree Celsius

PTI, New Delhi
PUBLISHED ON JAN 23, 2021 10:31 AM IST
A fresh Western Disturbance (WD) affecting the western Himalayas provided some relief from the chill.
Close
An authority notice said no non-scheduled flight will be allowed to operate from 10am-1pm from January 20 to 26.(Vipin Kumar/HT PHOTO)
An authority notice said no non-scheduled flight will be allowed to operate from 10am-1pm from January 20 to 26.(Vipin Kumar/HT PHOTO)

No flights to, from Delhi airport from 10am-12.15pm till January 26

PUBLISHED ON JAN 23, 2021 07:34 AM IST
However, the restriction will not be applicable to the movements of the Indian Air Force, the Border Security Force, the Indian Army or helicopters, the notice said.
Close
Today she shares a poem she wrote when brother, Vikas, was starting a new life in Europe. (While posing for a snap, her younger son, Samarth, tiptoes from behind, and photo-bombs the portrait.)
Today she shares a poem she wrote when brother, Vikas, was starting a new life in Europe. (While posing for a snap, her younger son, Samarth, tiptoes from behind, and photo-bombs the portrait.)

Delhiwale: Stories on the move

By Mayank Austen Soofi
PUBLISHED ON JAN 23, 2021 04:10 AM IST
Jyoti Vij Ahuja is also a writer, who exploited the pandemic by compiling her short stories into a self-published e-book, Marital Bliss & Other Things.
Close
Earlier, the Delhi Police proposed a route map to the farmers where they could hold a tractor rally on January 26.(ANI file photo)
Earlier, the Delhi Police proposed a route map to the farmers where they could hold a tractor rally on January 26.(ANI file photo)

Farmers at Singhu border allege bid to infiltrate, spark violence

By shiv sunny, Anvit Srivastava
UPDATED ON JAN 23, 2021 02:14 AM IST
The development came on a day when talks between the farmers and the government broke down, and they said they will go ahead with their January 26 tractor rally inside the national capital – a demonstration that the government is attempting to avert.
Close
Three districts in the Capital have so far recorded a coverage rate lower than Delhi’s average — Shahdara, North (43.3%) and New Delhi (47.6%).(AFP)
Three districts in the Capital have so far recorded a coverage rate lower than Delhi’s average — Shahdara, North (43.3%) and New Delhi (47.6%).(AFP)

Only 35% health care workers in Delhi's Shahdara district have got jab so far

By Anonna Dutt, Abhishek Dey
UPDATED ON JAN 23, 2021 01:49 AM IST
The nationwide Covid-19 vaccination drive kicked off on January 16, after which registered health care workers in the Capital have received shots on January 18, 19 and 21 across 81 inoculation centres.
Close
The interventions suggested by the tool can be implemented by the pollution control boards and its implementation can be monitored by citizen watch groups and NGOs, the statement said.(Arvind Yadav/HT Photo)
The interventions suggested by the tool can be implemented by the pollution control boards and its implementation can be monitored by citizen watch groups and NGOs, the statement said.(Arvind Yadav/HT Photo)

Air quality panel ropes in agencies to develop tool to read nature of emissions

PUBLISHED ON JAN 23, 2021 01:28 AM IST
The sources of emissions covered will include industries, transport, power plants, residential, DG sets, road dust, agricultural burning, refuse burning, construction dust, ammonia, volatile organic compounds, landfills etc.
Close
On Friday, Kejriwal chaired a review meeting on the project in which he directed officials of the DSIIDC – a government company with the expertise of infrastructure development in industrial areas – to strictly stick to deadlines.(ANI Photo)
On Friday, Kejriwal chaired a review meeting on the project in which he directed officials of the DSIIDC – a government company with the expertise of infrastructure development in industrial areas – to strictly stick to deadlines.(ANI Photo)

Deadline extended by nine months for phase 1 of Rani Khera business park project

PUBLISHED ON JAN 23, 2021 01:22 AM IST
The business park – spread over an area of 150 acres in Rani Khera village near the Indira Gandhi International Airport – is meant to become a hub for enterprises in the technology and services sectors.
Close
Officials from the Union environment ministry said they were keeping a close watch to ensure more bird flu cases are not reported from the Delhi zoo or any other part of the Capital.(AFP Photo. Representative image)
Officials from the Union environment ministry said they were keeping a close watch to ensure more bird flu cases are not reported from the Delhi zoo or any other part of the Capital.(AFP Photo. Representative image)

Delhi: Six samples from zoo test negative for avian flu

PUBLISHED ON JAN 23, 2021 01:03 AM IST
Ramesh Pandey, director, National Zoological Park in Delhi said that while the zoo has not reported any fresh case of the flu, safety protocols have not been relaxed.
Close
IMD scientists said the drop in temperature on Friday was caused because the fog layer in the early hours moved further away from the ground, which did not allow temperatures to rise during the day.(Sanchit Khanna/HT file photo)
IMD scientists said the drop in temperature on Friday was caused because the fog layer in the early hours moved further away from the ground, which did not allow temperatures to rise during the day.(Sanchit Khanna/HT file photo)

Delhi gets colder: Temperature to fall further from Sunday, IMD predicts

PUBLISHED ON JAN 23, 2021 12:42 AM IST
On Friday, the minimum temperature recorded at Delhi’s Safdarjung weather station, considered the official marker for the city, was 4.2°C — three below the season’s normal. The maximum temperature, meanwhile, was 18.6°C — three below normal.
Close
HT Image
HT Image

‘Presumption of innocence’ should not be destroyed, court says while hearing riots case

By Press Trust of India, New Delhi
PUBLISHED ON JAN 23, 2021 12:20 AM IST
A city court on Friday said the “presumption of innocence” should not be destroyed at the threshold of the justice process through a media trial, while hearing a plea moved by former Jawaharlal Nehru University student Umar Khalid alleging a “vicious media campaign” against him in a Delhi riots case
Close
HT Image
HT Image

Only 35% health care workers in Shahdara district have got Covid jab so far, lowest in Delhi

By Anonna Dutt and Abhishek Dey, New Delhi
UPDATED ON JAN 23, 2021 12:20 AM IST
After four rounds of Covid-19 inoculation in the national capital, Shahdara district has seen the lowest number of health care workers immunised so far, with a little more than 1/3rd of all targeted beneficiaries receiving the jab over the past week
Close
HT Image
HT Image

Three held for running fake call centre, duping job aspirants of money

By HT Correspondent, New Delhi
PUBLISHED ON JAN 23, 2021 12:18 AM IST
Police on Friday said they had arrested three persons for allegedly running a fake call centre through which they were cheating job aspirants of money by offering them jobs in a non-existent automobile company
Close
HT Image
HT Image

Airspace restrictions in place till R-Day

By HT Correspondent, New Delhi
PUBLISHED ON JAN 23, 2021 12:18 AM IST
Due to the closure of airspace on account of Republic Day celebrations and rehearsals, no scheduled flight will operate from Delhi’s Indira Gandhi International Airport daily between 10am and 12
Close
HT Image
HT Image

Deadline extended by nine months for phase 1 of Rani Khera business park project

By HT Correspondent, New Delhi
PUBLISHED ON JAN 23, 2021 12:17 AM IST
The Delhi government has pushed the deadline for the completion of the first phase of the upcoming business park at Rani Khera by nine months, in view of the delay caused by the Covid-19 pandemic, said a senior government official on Friday
Close
SHARE
Story Saved
OPEN APP