In the wake of the tragic terror attack in Pahalgam on April 22nd, Indian cybersecurity agencies have been working tirelessly to thwart a significant surge in cyber intrusions, with an estimated 30-40 attacks occurring daily. These attacks are suspected to be orchestrated by Pakistan-sponsored hacker groups, marking a continuation of cross-border hostility in the cyber realm. The digital offensive is viewed as a strategic component of hybrid warfare, aimed at escalating tensions following the real-world violence.
Cybersecurity agencies and Maharashtra Cyber, the state's cybercrime division, have reported a dramatic increase, with over one million cyberattack attempts recorded since the Pahalgam incident, which resulted in the death of several Indian tourists. The attacks have been attributed to known Pakistan-based groups such as 'Cyber Group HOAX1337' and 'National Cyber Crew'. Their tactics include attempts to deface Indian websites with propaganda and inflammatory messages,Deriding the victims of the terror strike.
The coordinated cyber assaults have targeted a range of Indian websites, with a particular focus on those linked to the armed forces. These include the Army Public Schools in Jammu, the Army Institute of Hotel Management, and platforms serving Indian Air Force veterans and retired servicemen. There were also attempts to infiltrate websites connected to children, elderly veterans, and civilians. A healthcare service site for ex-servicemen was among those defaced temporarily.
Indian cybersecurity forces, including CERT-In, the Ministry of Defence's IT cells, and state-level cyber units, have been swift and effective in neutralizing these attacks. Their efforts have prevented lasting harm or significant data theft, with most intrusions limited to defacement attempts. A senior official at Maharashtra Cyber stated that none of the attacks resulted in serious data compromise. These defensive actions are part of an elevated alert status maintained since the Pahalgam attack, with continuous monitoring of hacker communications and intrusion patterns. The intrusions were detected in real-time and quickly traced to their origin in Pakistan.
These cyber offensives are interpreted by analysts as a deliberate campaign intended to heighten digital tensions, and are considered elements of Pakistan's broader hybrid warfare strategy, which has historically involved terrorism and information warfare against India. In addition to Pakistan, cyberattacks have also originated from the Middle East, Indonesia, and Morocco. Some of the hacker groups have claimed allegiance to Islamist ideologies, suggesting a potentially coordinated cyber warfare effort.
In response to these threats, the Maharashtra Cyber Department has issued advisories to all government departments, urging them to bolster their cyber infrastructure. The repeated attempts to breach Indian cyber defenses highlight the adversary's intent and limitations. Despite the intensity of the cyber onslaught, Indian agencies have successfully protected critical national networks, with attacks primarily targeting publicly accessible welfare and educational websites.
Amid these tensions, it's important to remain vigilant against misinformation. Recently, a social media post falsely claimed that a cyberattack had caused 70% of India's electricity grid to fail. The Press Information Bureau (PIB) has debunked this claim, urging the public to rely on official sources for accurate information.
