Pakistan-allied hackers launched 15 lakh cyber attacks on Indian websites; only 150 successful

The cyber offensive is believed to originate primarily from Pakistan, Bangladesh, Indonesia, Morocco, and other Middle Eastern nations

In the aftermath of the Pahalgam terror strike, Maharashtra Cyber has identified seven Advanced Persistent Threat (APT) groups responsible for launching more than 15 lakh cyber attacks targeting India’s critical infrastructure, officials said on Monday.

Although only 150 of these attacks were successful, the state’s cyber officials cautioned that Indian government websites continue to face an unrelenting barrage of attempted intrusions — even after India and Pakistan reached a ceasefire understanding last week. The cyber offensive is believed to originate primarily from Pakistan, Bangladesh, Indonesia, Morocco, and other Middle Eastern nations.

At a press briefing, Maharashtra Cyber Additional Director General of Police Yashasvi Yadav debunked circulating claims that hackers had stolen sensitive data from Mumbai’s Chhatrapati Shivaji Maharaj International Airport (CSMIA), breached aviation and municipal systems, or targeted the Election Commission website.

“The probe revealed that while the frequency of cyber attacks declined after the cessation of hostilities, they have not stopped. These continued assaults are part of a coordinated campaign led by Pakistan-allied hacking groups,” Yadav said.

A detailed report titled “Road of Sindoor” - compiled as part of India’s broader counter-terror operation of the same name - has been submitted to key agencies, including the Director General of Police and the State Intelligence Department. The report outlines a coordinated cyber warfare strategy involving a mix of malware campaigns, Distributed Denial-of-Service (DDoS) attacks, GPS spoofing, and website defacement.

Among the seven groups named in the report are APT 36 (Pakistan-based), Pakistan Cyber Force, Team Insane PK, Mysterious Bangladesh, Indo Hacks Sec, Cyber Group HOAX 1337, and the National Cyber Crew - all known to be affiliated with anti-India interests.

According to Yadav, among the 150 successful cyber attacks, the Kulgaon Badlapur Municipal Council website was defaced. Hackers also claimed to have accessed data from telecom companies and the Mumbai airport, with some information reportedly circulating on darknet forums. Another confirmed defacement targeted the website of the Defence Nursing College in Jalandhar.

The report also exposed a broader hybrid warfare campaign waged by these groups, which included the spread of false information. Misinformation claims ranged from fabricated attacks on India's banking systems and power grid to alleged satellite jamming and disruption of military commands, including the Northern Command and a BrahMos missile storage site.

Maharashtra Cyber has actively countered these efforts, removing over 5,000 fake or misleading pieces of content from social media. Of 80 high-priority misinformation cases flagged for takedown, 35 have been successfully removed, with 45 still under review.

Yadav urged the public to remain vigilant against fake news and misinformation campaigns, and to rely on official government sources for updates. “Citizens are advised not to believe or spread unverified news that can escalate panic or undermine national security,” he said.