New Delhi: The Indian Army wants its officers holding critical posts to deactivate their Facebook accounts and not use the popular messaging application, WhatsApp, for any official communication.
In an advisory issued last month, the army has cautioned officers holding sensitive posts in all headquarters, divisions and brigades that WhatsApp is a vulnerable platform and so should not be used for any official communication.
It added that although WhatsApp is end-to-end encrypted, the encryption would cease to be effective if the mobile handset on which it is being used gets compromised.
WhatsApp was recently in the eye of a storm after it admitted that surveillance software called Pegasus — owned by an Israel-based NSO group — had been used to compromise some of its Indian users, including journalists and activists.
The advisory comes after the army cyber group conducted an analysis of social media trends in which it has identified a new set of problems on the ways its personnel use the internet.
The advisory states that the popular social media platform Facebook has turned out to be a crucial source of collecting intelligence, which is why officers holding critical posts in the army must consider deactivating their accounts.
Armed forces personnel and their families have been discouraged from posting their pictures in uniform or photographs of locations that can give out details of sensitive locations on Facebook or other social media apps.
We are deeply grateful to our readers & viewers for their time, trust and subscriptions.
Quality journalism is expensive and needs readers to pay for it. Your support will define our work and ThePrint’s future.
According to the advisory, there have been numerous instances of loss of information through social media — which could well be inadvertent — despite multiple directives issued to army personnel time and again on the threats and implications of using the online medium. A social media policy for the army is already in place since 2016.
The advisory also talks of inimical agencies possessing sophisticated tools for monitoring and analysing data on social media to derive intelligence, underscoring that those holding critical appointments are especially at risk.
OSINT can give away substantial information
According to the advisory, information on OSINT or open source intelligence on the internet, can give away substantial information on important appointments held by army officers.
It advises officers holding sensitive appointments to be aware of the information available about them on the internet and take steps to ensure that critical data about them is not given out inadvertently.
The advisory also states that army personnel should be cautious in giving out personal and professional details while creating accounts on social media platforms. It further states that substantial information can be extracted just by analysing posts or comments on social media made by either army personnel or their families or friends.
It advises exercising restraint in posting comments, ensuring correct privacy settings and educating families and friends of those in the army.
The advisory cautions army personnel to not link their gmail accounts to multiple other applications that could compromise sensitive information on the email account.
Use of smartphones
Highlighting the susceptibility of smartphones to cyber attacks, the advisory states that social media and other applications should be avoided on smartphones and they should be used only for voice calls and SMS.
It states that email clients used for official communication should be strictly avoided on smartphones, as they are susceptible to phishing campaigns that can compromise the phone, leading to exploitation of calls and messages too.
The advisory also warns army personnel that the location services on a smartphone can give out vital details of movement and has hence asked to keep their location services switched off at all times, particularly during visits to forward areas.
Leak of crucial information a matter of concern for military
Pilferage of crucial information about the armed forces has remained a matter of concern for the Indian military, prompting it to issue multiple directives and advisories on the use of social media.
ThePrint had reported that in July this year, the army had started month-long cyber security exercise to identify and crack down on those violating its norms for all online activities and had those found violating the norms would face “exemplary” punishment.
Just about a week before that, the Director General of Military Operations (DGMO) issued a list of instructions on information security to all army units and formations, stating that enemy agencies have access to advanced monitoring, decryption and data analysis capabilities.
News media is in a crisis & only you can fix it
You are reading this because you value good, intelligent and objective journalism. We thank you for your time and your trust.
You also know that the news media is facing an unprecedented crisis. It is likely that you are also hearing of the brutal layoffs and pay-cuts hitting the industry. There are many reasons why the media’s economics is broken. But a big one is that good people are not yet paying enough for good journalism.
We have a newsroom filled with talented young reporters. We also have the country’s most robust editing and fact-checking team, finest news photographers and video professionals. We are building India’s most ambitious and energetic news platform. And we aren’t even three yet.
At ThePrint, we invest in quality journalists. We pay them fairly and on time even in this difficult period. As you may have noticed, we do not flinch from spending whatever it takes to make sure our reporters reach where the story is. Our stellar coronavirus coverage is a good example. You can check some of it here.
This comes with a sizable cost. For us to continue bringing quality journalism, we need readers like you to pay for it. Because the advertising market is broken too.
If you think we deserve your support, do join us in this endeavour to strengthen fair, free, courageous, and questioning journalism, please click on the link below. Your support will define our journalism, and ThePrint’s future. It will take just a few seconds of your time.