Tag: india
-
Mustang Panda’s New LOTUSLITE Variant Targets India Banks, South Korea Policy Circles
Cybersecurity researchers have discovered a new variant of a known malware called LOTUSLITE that’s distributed via a theme related to India’s banking sector.”The backdoor communicates with a dynamic DNS-based command-and-control server over HTTPS and supports remote shell access, file operations, and session management, indicating a continued espionage-focused capability set rather than First seen on thehackernews.com…
-
Microsoft-Signed Binary Helps Deliver LOTUSLITE in India Spy Campaign
Microsoft-signed developer tooling is being abused to quietly deploy a new LOTUSLITE backdoor variant against India’s banking sector, in what researchers link to the China”‘nexus Mustang Panda espionage cluster with moderate confidence. The backdoor retains its espionage profile, offering remote shell access, file operations, and session management rather than any obvious monetization features. Communications are…
-
Chinese APT Targets Indian Banks, Korean Policy Circles
China is spying on India’s financial sector, for some reason, and it’s not putting much effort into it, judging by some stale TTPs. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/chinese-apt-indian-banks-korean-policy
-
Red Hat RHELocates its Chinese engineering team to India
Hundreds of layoffs, but this smells of geopolitics, not downsizing First seen on theregister.com Jump to article: www.theregister.com/2026/04/10/red_hat_ends_china_engineering/
-
Bitter-Linked Hack-for-Hire Campaign Targets Journalists Across MENA Region
An apparent hack-for-hire campaign likely orchestrated by a threat actor with suspected ties to the Indian government targeted journalists, activists, and government officials across the Middle East and North Africa (MENA), according to findings from Access Now, Lookout, and SMEX.Two of the targets included prominent Egyptian journalists and government critics, Mostafa First seen on thehackernews.com…
-
Hackhire spyware campaign targets journalists in Middle East, North Africa
Access Now, Lookout and SMEX joined research forces to find a campaign involving suspected Indian government-connected group Bitter, ProSpy spyware and more. First seen on cyberscoop.com Jump to article: cyberscoop.com/hack-for-hire-spyware-campaign-targets-journalists-in-middle-east-north-africa/
-
India Set to Ban Hikvision, TP-Link Devices in April
Starting April 1, 2026, the Indian government will officially enforce a nationwide ban on the sale of internet-connected CCTV cameras from major Chinese manufacturers, including Hikvision, Dahua, and TP-Link. This decisive market restriction is fundamentally driven by escalating national security concerns. Officials aim to eliminate inherent hardware vulnerabilities that could potentially enable foreign espionage operations…
-
Indian government probes CCTV espionage operation linked to Pakistan
Police found cameras pointing at infrastructure First seen on theregister.com Jump to article: www.theregister.com/2026/03/26/india_pakistan_cctv/
-
Florida Suspends Firm for Unlawfully Offshoring Claims Data
State: Medicare Enrollee Data Sent to Unlicensed Firms in India, Philippines. State insurance regulators have suspended a Florida third-party health administrator firm for unlawfully offshoring sensitive claims and other data of more than 23,000 Florida Medicare Advantage enrollees to several unlicensed companies in India and the Philippines. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/florida-suspends-firm-for-unlawfully-offshoring-claims-data-a-31177
-
Founder of CoinDCX Arrested Amid Serious Fraud and Cheating Charges
The Indian cryptocurrency sector is currently facing a significant legal and cybersecurity controversy following the recent arrest of prominent CoinDCX executives. Local law enforcement from Mumbra police in Thane apprehended co-founders Sumit Gupta and Neeraj Khandelwal in Bengaluru. Both executives were produced before a court and remanded into police custody, facing charges of criminal breach…
-
Android Malware Campaign Targets Indian Users via Fake eChallan Alerts
A new Android malware campaign targeting Indian users has been reported by the Indian Computer Emergency Response Team, CERT-In. According to the agency, multiple reports indicate a coordinated effort by cybercriminals to steal sensitive financial and personal data through deceptive mobile applications and phishing techniques. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/android-malware-campaign-rto-challan/
-
Mend.io Expands Its Global Infrastructure with a Dedicated Cloud Region in India
Local cloud infrastructure in India for data residency requirements. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/mend-io-expands-its-global-infrastructure-with-a-dedicated-cloud-region-in-india/
-
Mend.io Expands Its Global Infrastructure with a Dedicated Cloud Region in India
Local cloud infrastructure in India for data residency requirements. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/mend-io-expands-its-global-infrastructure-with-a-dedicated-cloud-region-in-india/
-
UIDAI Introduces Bug Bounty Program to Strengthen Aadhaar Defenses
The Unique Identification Authority of India (UIDAI) has officially launched its first structured bug bounty program to fortify the Aadhaar system. As the foundation of a massive national identity database, securing Aadhaar requires continuous innovation and rigorous testing. This new initiative invites top cybersecurity experts to proactively identify and responsibly disclose potential vulnerabilities within UIDAI’s…
-
SideWinder Espionage Campaign Expands Across Southeast Asia
Tags: espionage, government, group, india, infrastructure, phishing, spear-phishing, threat, vulnerabilityThe suspected India-linked threat group targets governments, telecom, and critical infrastructure using spear-phishing, old vulnerabilities, and rapidly rotating infrastructure to maintain persistent access. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/sidewinder-espionage-campaign-expands-across-southeast-asia
-
AWS expands Security Hub for multicloud security operations
Tags: access, api, ceo, ciso, cloud, cybersecurity, data, detection, endpoint, framework, google, identity, incident response, india, infrastructure, Internet, microsoft, monitoring, risk, threat, tool, vulnerability, vulnerability-managementCross-cloud security monitoring: While AWS has not provided technical details on how it will identify vulnerabilities outside its native environment, Sanchit Vir Gogia, chief analyst at Greyhound Research, said multicloud visibility typically works by collecting signals from multiple security systems and translating them into a consistent format so they can be analysed together.A key enabler…
-
What Makes India a Preferred Destination for Software Development, Innovation, and AI in 2026?
India software development outsourcing in 2026 is no longer about labor arbitrage. It is about capability density, AI engineering depth, digital product velocity, and the…Read More First seen on securityboulevard.com Jump to article: https://securityboulevard.com/2026/03/what-makes-india-a-preferred-destination-for-software-development-innovation-and-ai-in-2026/
-
Nasscom Calls for Vigilance as Firms Brace for Impact from West Asia Conflict
As tensions linked to the ongoing West Asia conflict continue to shape the geopolitical environment, India’s technology industry body NASSCOM has urged member companies to remain alert and strengthen operational preparedness. The NASSCOM advisory highlights the need for heightened vigilance across business continuity and cybersecurity frameworks amid developments in the Middle East. First seen on…
-
Transparent Tribe’s ‘Vibeware’ Move Points to AI-Made Malware at Scale
Transparent Tribe (APT36) is moving from traditional, off”‘the”‘shelf tools to an AI-assisted malware model researchers now call “vibeware,” signaling how large language models are starting to industrialize mediocre but relentless attacks at scale.”‹ In its latest campaigns against Indian government bodies, embassies and regional targets, the group has shifted to an AI-driven development pipeline that…
-
Transparent Tribe Uses AI to Mass-Produce Malware Implants in Campaign Targeting India
The Pakistan-aligned threat actor known as Transparent Tribe has become the latest hacking group to embrace artificial intelligence (AI)-powered coding tools to strike targets with various implants.The activity is designed to produce a “high-volume, mediocre mass of implants” that are developed using lesser-known programming languages like Nim, Zig, and Crystal and rely on trusted services…
-
Pakistan-Linked APT36 Floods Indian Govt Networks With AI-Made ‘Vibeware’
Bitdefender research reveals Pakistani group APT36 is using AI-generated vibeware and trusted cloud services like Google Sheets to target Indian officials. First seen on hackread.com Jump to article: hackread.com/pakistan-apt36-indian-govt-networks-ai-vibeware/
-
Stealth and Deception: Transparent Tribe’s Multi-Stage Assault on Indian Government Entities
The post Stealth and Deception: Transparent Tribe’s Multi-Stage Assault on Indian Government Entities appeared first on Daily CyberSecurity. First seen on securityonline.info Jump to article: securityonline.info/stealth-and-deception-transparent-tribes-multi-stage-assault-on-indian-government-entities/
-
Indian APT ‘Sloppy Lemming’ Targets Defense, Critical Infrastructure
India-nexus cyber threat actors are growing more active and sophisticated, using custom tools coded in Rust and cloud-based command and control. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/india-apt-sloppy-lemming-defense-critical-infrastructure
-
SloppyLemming Espionage Campaign Targets Pakistan, Bangladesh with BurrowShell Backdoor and Rust RAT
SloppyLemming, an India-linked espionage group also known as Outrider Tiger and Fishing Elephant, has run a year-long cyber campaign against high”‘value targets in Pakistan and Bangladesh using a new BurrowShell backdoor and a Rust-based remote access tool (RAT). This activity builds directly on earlier operations exposed by Cloudflare’s CloudForce One in 2024. However, it shows…
-
Alleged India-linked espionage campaign targeted Pakistan, Bangladesh, Sri Lanka
An espionage campaign last year targeted government agencies and critical infrastructure operators in Pakistan, Bangladesh and Sri Lanka, the cybersecurity firm Arctic Wolf said. First seen on therecord.media Jump to article: therecord.media/india-pakistan-cyber-campaign-apt
-
India disrupts access to popular developer platform Supabase with blocking order
India, one of Supabase’s biggest markets, is seeing patchy access after a government block order. First seen on techcrunch.com Jump to article: techcrunch.com/2026/02/27/india-disrupts-access-to-popular-developer-platform-supabase-with-blocking-order/
-
A security flaw at DavaIndia Pharmacy allowed attackers to access customers’ data and more
A security flaw at DavaIndia Pharmacy exposed customer data and gave outsiders full admin control of its systems. DavaIndia is a large Indian pharmacy retail chain focused on selling affordable generic medicines. Operated by Zota Health Care Ltd., the brand promotes low-cost alternatives to branded drugs to make healthcare more accessible across India. DavaIndia runs…
-
Indian pharmacy chain giant exposed customer data and internal systems
A backend flaw in web admin dashboards used by one of India’s largest pharmacy chains, exposed thousands of online pharmacy orders. First seen on techcrunch.com Jump to article: techcrunch.com/2026/02/13/indias-major-pharmacy-chain-exposed-customer-data-and-internal-systems/