Recent Surge in Cyber Attacks: Pakistani Hackers Target Indian Infrastructure
Overview of Cyber Attacks
In a troubling trend, over 1.5 million cyber attacks have been launched by seven Advanced Persistent Threat (APT) groups, primarily based in Pakistan, targeting critical Indian government websites following the recent Pahalgam terror strike. Maharashtra Cyber has reported that, out of these, only 150 attacks succeeded, leading to a staggering failure rate of 99.99%.
Background of the Operations
The extensive investigation, detailed in a report titled "Road of Sindoor," stems from a military initiative by the Indian armed forces. This report has been disseminated to key law enforcement agencies, including the Director General of Police and the State Intelligence Department. According to Yashasvi Yadav, the Additional Director General of Police at Maharashtra Cyber, the majority of these cyber attacks originated from regions such as Bangladesh, Pakistan, the Middle East, and an Indonesian group.
Persisting Cyber Threats Despite Ceasefire
In light of the recently established ceasefire between India and Pakistan, one might expect a decline in cyber attacks. However, reports indicate that while the frequency of these attacks has diminished slightly, they have not ceased entirely. Cyber intrusions continue to threaten government websites from various locations, including Pakistan, Bangladesh, and several Middle Eastern countries.
The investigations show that despite a reduction in military hostilities, websites belonging to major Indian institutions—like airports and the Election Commission—remain under threat. Notably, Maharashtra Cyber officials have dismissed claims that hackers breached the Chhatrapati Shivaji Maharaj International Airport‘s data or operations.
Techniques Employed by Hackers
The techniques used by these hackers encompass a range of sophisticated cyber warfare strategies, including:
- Malware campaigns
- Distributed Denial-of-Service (DDoS) attacks
- GPS spoofing
- Defacement of websites
Additionally, the report sheds light on how these groups engage in hybrid warfare strategies that involve misinformation campaigns, falsely claiming successful hacks into India’s banking sector, orchestrating power outages, and more. Such fabrications include reports of cyber attacks on India’s power grid and incidents of directory breaches related to BrahMos missile storage facilities.
Maharashtra Cyber has actively countered this misinformation, successfully identifying and eliminating over 5,000 instances of fake news about India-Pakistan military conflicts circulating on social media.
Identifying the Perpetrators
The investigative report identifies the following seven Pakistani hacker groups responsible for launching these cyber attacks:
- APT 36 (Pakistan-based)
- Pakistan Cyber Force
- Team Insane PK
- Mysterious Bangladesh
- Indo Hacks Sec
- Cyber Group HOAX 1337
- National Cyber Crew (Pakistan-allied)
These groups collectively orchestrated a large number of targeted attacks on Indian infrastructure.
Successful Cyber Attacks
Among the notably successful cyber intrusions, the Kulgaon Badlapur Municipal Council website was defaced, drawing significant attention. Additionally, claims emerged regarding data being stolen from Chhatrapati Shivaji Maharaj International Airport (CSMIA) and various telecommunication companies, with reports suggesting that some of this data surfaced on the darknet. The Defence Nursing College website in Jalandhar also fell victim to these cyber attacks.
Conclusion
The current landscape of cyber warfare highlights the persistent threats facing Indian infrastructure from aligned Pakistani hacking groups. Despite a low success rate for attacks, the continual onslaught emphasizes the urgent need for robust cybersecurity measures across various sectors in India.
For further insights on cybersecurity threats and measures, visit Maharashtra Cyber or learn more about cybersecurity strategies.
