Coordinated Cyber Assault Targets India's Critical Sectors

Strategic Insights -

India's critical sectors were targeted in a coordinated offensive cyber campaign launched by Pakistan-aligned state and non-state actors during heightened military tensions earlier this month. The cyber assault involved spear-phishing attacks, malware infections, website defacements, and data leaks carried out by 35 hacktivist groups, with seven being new entrants. The attackers used malicious documents disguised as official advisories to deploy malware, and spoofed legitimate Indian domains to deliver payloads and communicate with command-and-control servers hosted at foreign locations.

Key Takeaways:

  • 35 hacktivist groups were involved in the coordinated cyber assault, with 7 being new entrants.
  • The attackers used malicious documents disguised as official advisories to deploy malware, including "Final_List_of_OGWs.xlam" and "Preventive_Measures_Sindoor.ppam".
  • The attackers spoofed legitimate Indian domains, including nationaldefensecollege[.]com and zohidsindia[.]com, to deliver payloads and communicate with command-and-control servers.
  • The infrastructure behind the operation was masked using VPS (virtual private servers) in Russia, Germany, Indonesia, and Singapore.
  • APT36, a Pakistan-linked advanced persistent threat (APT) group, was at the heart of the digital siege, targeting Indian defense and government agencies.
  • The attackers used hashtags like #OpIndia and #OperationSindoor to claim responsibility for data leaks from municipal databases, defense contractors, telecom operators, and hospital networks.
  • Seqrite Labs described the cyber assault as a "digitally coordinated war game" and a "new era of digital warfare" designed to sow disruption, distrust, and disinformation.

Statistics:

  • Over 650 cyber incidents were targeted at India's critical sectors.
  • 7 new hacktivist groups were identified, bringing the total to 35 groups involved in the coordinated cyber assault.

Sources:

  • Seqrite Labs, report released on [unsure of exact date, mentioned as "Friday"]
  • Times of India article, "Coordinated cyber assault targets India's critical sectors" by [unsure of author's name]
  • APT36 report, mentioned in Seqrite Labs report

Note: The exact date of the report release by Seqrite Labs is not mentioned in the provided text.