Indian Cyber Force labeled a persistent political cyber threat
cybernewschronicle.com · post 60100 · 2024-10-19
New Delhi – The Indian Cyber Force first made headlines in 2023 when it breached the website of the Canadian Armed Forces, foreshadowing a pattern of politically motivated attacks that would intensify over the following year. In October 2024, Canada’s Communications Security Establishment officially classified India as a “cyber threat,” a designation that coincided with the group’s ongoing activities.
Operating from within India, the Indian Cyber Force selects targets that align with the country’s strained diplomatic relationships. Nations most frequently affected include Pakistan, Canada, China, Palestine, Qatar, the Maldives and Bangladesh, with Pakistan experiencing the greatest number of incidents. The group’s self‑described pro‑India and pro‑Israel stance, combined with accusations of Hindu nationalist and anti‑Muslim motivations, places its operations within a broader ideological framework rather than purely technical hacking.
One of the most consequential breaches occurred in 2023 when data belonging to roughly 270,000 Bangladeshi citizens was exposed. The leak involved personal information on a massive scale, illustrating the real‑world impact of the group’s capabilities.
Following the October 7 attacks in Israel, the Indian Cyber Force turned its attention to Palestinian entities, compromising the Palestinian National Bank, the Palestinian Telecommunication Company and Hamas‑related sites, underscoring the political messaging behind its target selection. In the wake of the Pahalgam incident, the group claimed responsibility for leaks from several Pakistani institutions, including Habib Bank Limited, the University of Balochistan, Sindh Police and the Federal Board of Revenue. Each disclosure was framed as a deliberate strike intended to convey a specific message.
Webz.io, a firm specializing in web‑intelligence analytics, listed the Indian Cyber Force among the five most active hacktivist collectives of 2024. This recognition situates the group alongside other globally operating entities and reflects the volume and consistency of its operations throughout the year.
The timing of these attacks is notable given the diplomatic standoff between India and Canada. While the Indian Cyber Force is a non‑state actor, its assaults on a foreign military website blur the line between independent hacking and state‑level cyber policy, raising questions about possible tacit approval or tolerance within India. Beyond governmental sites, the group repeatedly targets banks, universities, police forces and revenue agencies—organizations that store extensive personal data.
The resulting leaks breach privacy, create security vulnerabilities and effectively weaponize information. Unlike many covert actors, the Indian Cyber Force operates openly, publicly claiming responsibility for each intrusion and publishing the stolen data.
This brazen approach signals confidence, a sense of impunity, and perhaps an expectation of protection from domestic authorities, though the extent of any official backing remains unverified. As of the latest reports, the list of affected nations continues to expand, encompassing Canada, Pakistan, China, Palestine, Qatar, the Maldives and Bangladesh. The group does not differentiate between state institutions and civilian entities, striking both with equal vigor. The leaked data remains publicly accessible, and there are currently no indications that the Indian Cyber Force is slowing its campaign.