Malicious actors are exploiting trust in India's digital public infrastructure by creating a deceptive phishing website with the address digiyatra[.]in, which pretends to belong to the DigiYatra Foundation.
See also: Fake Ledger apps steal seed phrases from macOS users
The fake website in question is used to collect users’ personal data, presenting itself as an official service for air travelers. Its design subtly resembles a genuine flight booking portal, including a flight search form and fields for entering personal details such as name, phone number and email. However, no actual booking is made — the environment is designed solely for data collection.
This deceptive design was detected by ThreatWatch360 's early warning and threat detection program , which constantly monitors domain registrations related to digital public services like DigiYatra. Upon further investigation, the team found that the website uses a free SSL certificate from Let's Encrypt , which adds to the illusion of legitimacy.
See also: Google Play: Over 300 malicious apps found with 60 million downloads
The domain was registered to Ali Sajil from Kerala, India and, despite its deceptive nature, remains accessible both through the domain name and directly through the IP address (167[.]172[.]151[.]164). The existence of this phishing website poses multiple threats, including unauthorized data collection, public deception, and potential damage to the reputation of the DigiYatra initiative.
The real danger lies in its ability to mislead users, leveraging keywords and the appearance of security through the use of HTTPS.
In response, ThreatWatch360 has escalated the issue to CERT-In and submitted a takedown request to the domain registrar. Notifications have been sent to clients involved in protection , and monitoring for similar fraudulent activity is ongoing. In addition, recommendations have been made to block the domain and IP at the DNS level to prevent further abuse.
See also: Malicious OAuth applications target Microsoft 365 accounts
A related and particularly important point that emerges from the above is the following: The existence of fake websites that imitate official government or public digital services, such as DigiYatra in India, poses a serious threat to cybersecurity and public trust in the digital ecosystem.
Source: gbhackers
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
