.png)
Seven Advanced Persistent Threat (APT) groups associated with Pakistan attempted to infiltrate Indian infrastructure, resulting in a staggering 99.99% failure rate despite launching over 1.5 million cyberattacks. Identified by Maharashtra Cyber, these groups employed various tactics including malware, DDoS attacks, GPS spoofing, and misinformation campaigns, with only 150 attacks achieving success and causing negligible disruption.
1. APT36 (Transparent Tribe): Known for cyber espionage since 2013, it targets Indian defense and government sectors using CrimsonRAT malware via spear-phishing.
2. Pakistan Cyber Force: Claimed breaches of Military Engineering Services and Manohar Parrikar Institute, and defaced Armoured Vehicle Nigam Limited’s website with Pakistan’s flag.
3.
Team Insane PK: Targeted Indian Army websites,
like the Army College of Nursing, with provocative messaging.
4.
Mysterious Bangladesh: A Pakistan-allied group
involved in coordinated attacks on Indian portals.
5.
Indo Hacks Sec: Participated in defacement and
misinformation campaigns.
6.
Cyber Group HOAX1337: Attempted to deface Army
Public School websites with messages mocking Pahalgam victims.
7.
National Cyber Crew: Targeted welfare and
educational sites, including Army Public Schools, with inflammatory content.
The alarming use of misinformation as a cyber weapon was
particularly concerning. These groups propagated false narratives claiming they
had infiltrated India's banking systems and even instigated power grid failures
and satellite disruptions, none of which were verified. Over 5,000 deceptive
posts related to the India-Pakistan conflict were identified and removed from
social media platforms.
Despite an existing ceasefire agreement between India and
Pakistan, digital hostilities continued. The report highlights that, although
many attacks were successfully countered, they persisted from nations such as
Bangladesh, Indonesia, and Pakistan's Middle Eastern allies.
Maharashtra Cyber officials noted that while the frequency of cyberattacks decreased following the ceasefire, they did not cease entirely. State intelligence agencies are collaborating with national cybersecurity teams to consistently monitor and prevent such intrusions. The report has been presented to all key law enforcement and intelligence agencies, including the Director General of Police and the State Intelligence Department, emphasizing India's preparedness in cyberspace and the necessity for coordinated efforts to safeguard digital frontiers.