Army wants officers to deactivate Facebook accounts, stay away from WhatsApp
The Indian Army wants its officers holding critical posts to deactivate their Facebook accounts and not use the popular messaging application, WhatsApp, for any official communication.
In an advisory issued last month, the army has cautioned officers holding sensitive posts in all headquarters, divisions and brigades that WhatsApp is a vulnerable platform and so should not be used for any official communication.
It added that although WhatsApp is end-to-end encrypted, the encryption would cease to be effective if the mobile handset on which it is being used gets compromised.
WhatsApp was recently in the eye of a storm after it admitted that surveillance software called Pegasus — owned by an Israel-based NSO group — had been used to compromise some of its Indian users, including journalists and activists.
The advisory comes after the army cyber group conducted an analysis of social media trends in which it has identified a new set of problems on the ways its personnel use the internet.
The advisory states that the popular social media platform Facebook has turned out to be a crucial source of collecting intelligence, which is why officers holding critical posts in the army must consider deactivating their accounts.
Armed forces personnel and their families have been discouraged from posting their pictures in uniform or photographs of locations that can give out details of sensitive locations on Facebook or other social media apps.
According to the advisory, there have been numerous instances of loss of information through social media — which could well be inadvertent — despite multiple directives issued to army personnel time and again on the threats and implications of using the online medium. A social media policy for the army is already in place since 2016.
The advisory also talks of inimical agencies possessing sophisticated tools for monitoring and analysing data on social media to derive intelligence, underscoring that those holding critical appointments are especially at risk.
OSINT can give away substantial information
According to the advisory, information on OSINT or open source intelligence on the internet, can give away substantial information on important appointments held by army officers.
It advises officers holding sensitive appointments to be aware of the information available about them on the internet and take steps to ensure that critical data about them is not given out inadvertently.
The advisory also states that army personnel should be cautious in giving out personal and professional details while creating accounts on social media platforms. It further states that substantial information can be extracted just by analysing posts or comments on social media made by either army personnel or their families or friends.
It advises exercising restraint in posting comments, ensuring correct privacy settings and educating families and friends of those in the army.
The advisory cautions army personnel to not link their gmail accounts to multiple other applications that could compromise sensitive information on the email account.
Reference:
Comments
Post a Comment