📌 Topic 04 of 6 · Chapter 05 · IT & Cybersecurity

Cybercrime & Cybersecurity in India

Types of cybercrime, IT Act 2000, CERT-In, cyber laws — complete notes for UPSC & PSC exams.

🔒 Types of Cybercrime

Type	Description	Example
Phishing	Fraudulent emails/websites to steal credentials	Fake bank emails asking for password
Ransomware	Malware encrypts data; demands ransom	WannaCry (2017) — affected 200,000+ computers globally
DDoS Attack	Overwhelms servers with traffic; makes them unavailable	Attacks on government websites
Identity Theft	Stealing personal information for fraud	Using stolen Aadhaar/PAN for financial fraud
Cyberstalking	Harassing someone online	Social media harassment
SQL Injection	Inserting malicious code into database queries	Stealing database records
Man-in-the-Middle	Intercepting communication between two parties	Intercepting banking transactions

🔒 India’s Cyber Laws & Organisations

IT Act 2000 (Information Technology Act) — India’s primary cyber law; amended 2008
Key sections: Section 66 (hacking), Section 67 (obscene content), Section 69 (interception)
CERT-In (Computer Emergency Response Team India) — nodal cybersecurity agency — under MeitY
NCIIPC (National Critical Information Infrastructure Protection Centre) — protects critical infrastructure
Cyber Surakshit Bharat — government initiative for cybersecurity awareness
National Cyber Security Policy 2013 — framework for cybersecurity

⭐ Key Facts:
• IT Act 2000 = India’s primary cyber law = amended 2008
• CERT-In = Computer Emergency Response Team India = nodal cybersecurity agency
• WannaCry (2017) = global ransomware attack = affected India too
• Phishing = most common cybercrime in India
• NCIIPC = protects critical infrastructure (power, banking, telecom)

← Topic 03
Topic 05: IT Industry →
📝 MCQs
← Chapter Hub