#India
9 stories taggedIndia.

A Government of India Website Is Tricking Visitors Into Running Malware From Their Own Keyboard
A fake security check on a page linked to India's STPI quietly loads a harmful command onto visitors' clipboards, then asks them to paste and run it themselves.

Delhi's Electric Rickshaws Are Being Hacked via Bluetooth, and Nobody Has to Be a Programmer to Do It
Scammers with a free app are killing electric rickshaw engines in Delhi traffic, exposing a gap in India's push to clean up one of the world's most polluted cities.

Cruciferra: The Malware-Hiding Service Fuelling Attacks on Indian Taxpayers
A China-linked group is paying for a tool called Cruciferra to smuggle remote-access malware onto Windows machines, with fake income tax emails as the entry point.

Suspected Chinese and Indian Spies Both Targeted Pakistani Police, Researchers Say
A two-year campaign hit Balochistan Police and other law enforcement bodies, with servers holding criminal records among the compromised assets.

Fake Tax Emails Are Planting Two Separate Spying Tools on Indian Taxpayers' Computers
A campaign timed to India's tax filing season tricks people into downloading what looks like an official government utility, and inside are two hidden programs that give criminals full remote control of the victim's machine.

Fake Indian tax portal used to plant spyware on finance teams' computers
A suspected Chinese hacking group is posing as India's Income Tax Department to slip a remote-control trojan onto the machines of accountants and corporate finance staff.

One Researcher, 14 Flaws, Millions of Indians at Risk
A young independent security researcher found gaping holes in Indian government portals, including an admin panel left wide open to the entire internet. The government fixed everything within three weeks.

Mustang Panda Turns Zoho WorkDrive Into C2 in Twin Campaigns Against Indian Government
The China-aligned crew is running parallel operations against New Delhi ministries and hydropower operators, routing commands through a legitimate cloud collaboration service that most enterprise defenses will never flag.

India Sets a 12-Hour Clock on Exploited Vulnerabilities. Can Enterprises Actually Do It?
CERT-In's new AI-threat framework resets expectations around patch velocity, but the real test is whether organizations even know what's exposed.