Cyberattacks on Indian Defence-Linked Websites Thwarted by Cybersecurity Experts Amid Rising Cross-Border Tensions

Key takeaways

• The sites were public-facing and not holding classified data, according to the article.
• Reports of foiled attacks are 'reportedly' and need official confirmation.
• Basic hygiene such as patching and WAF rules defends public sites.

Table of Contents

• What Was Targeted in the Cyberattack?
• Tactics Used by the Attackers
• Who Were the Attackers?
• India’s Swift and Effective Cybersecurity Response
• Why Attack Defence-Linked Civil Platforms?
• Connection to Recent Geopolitical Tensions
• What This Means for India’s Cybersecurity Sector
• Lessons Learned for Future Protection
• Conclusion

In April 2026, Indian cybersecurity agencies successfully foiled multiple cyberattacks targeted at websites linked to defence infrastructure. These websites, though not hosting classified data, are essential parts of India’s extended defence ecosystem. The cyberattacks were traced to a Pakistani hacker group called IOK Hacker or Internet of Khilafah, whose objective was to cause digital disruption and create psychological panic.

What Was Targeted in the Cyberattack?

Hackers focused on public-facing defence-affiliated websites, assuming these would have lower security than core military systems. The four targeted platforms included:

These cyber threats were stopped before any major breach occurred.

Tactics Used by the Attackers

The attackers used a mix of basic and intermediate cyberattack techniques, such as:

• Website Defacement: Altering webpages to post false or provocative messages

• DDoS Attacks: Flooding servers with traffic to make websites crash

• SQL Injection and Database Access: Attempting to extract user data from backend servers

• Brute Force Login Attempts: Repeatedly trying to guess login credentials

While these are common in cyber warfare, Indian systems responded rapidly to mitigate them.

Who Were the Attackers?

According to Indian intelligence, the attacks were carried out by a Pakistani-based hacker group known as:

• IOK Hacker (Internet of Khilafah)

This group is known for politically motivated cyber operations with objectives such as:

• Creating unrest through online propaganda

• Disrupting public trust in defence institutions

• Targeting low-security entry points in defence-adjacent infrastructure

India’s Swift and Effective Cybersecurity Response

Indian cybersecurity teams, both government and military, responded swiftly and decisively:

• Quarantined the affected systems

• Removed malicious content

• Conducted forensic analysis to trace the attack origin

• Secured the servers with updated patches and enhanced firewalls

Most importantly, no classified military systems or networks were compromised, reinforcing India's multi-layered cybersecurity strategy.

Why Attack Defence-Linked Civil Platforms?

1. Easier Targets, Maximum Attention

Since core military networks are heavily protected, hackers often turn to public-facing websites to:

• Gain media attention

• Spread false narratives

• Create panic among the public and staff

2. Psychological Warfare

These attacks are part of asymmetric digital warfare, aimed at:

• Lowering morale

• Sowing distrust in defence readiness

• Provoking emotional and political reactions

Connection to Recent Geopolitical Tensions

The attacks took place shortly after:

• A terrorist attack in Pahalgam (April 22, 2025)

• Incidents of cross-border firing along the LoC

This indicates a coordinated effort to increase disruption via both physical and cyber means.

What This Means for India’s Cybersecurity Sector

This event highlights several important facts:

• Cybersecurity is national security

• Even non-classified platforms like school or housing websites must be protected

• Cyber awareness and preparedness across all departments is critical

• Collaborative action between military and civilian cybersecurity units is effective

Lessons Learned for Future Protection

To prevent future threats, India is continuing to:

• Upgrade cybersecurity protocols across all defence-linked portals

• Conduct penetration testing and vulnerability audits

• Implement AI-based threat detection

• Train staff and developers on secure coding and cyber hygiene

Conclusion

The attempted cyberattacks from Pakistan on Indian defence-affiliated platforms serve as a reminder that digital warfare is an ongoing threat. Thanks to India’s strong cyber infrastructure and quick response mechanisms, these cyber intrusions were neutralized before any real damage occurred. As cybersecurity becomes an integral part of national defence, vigilance, training and continual improvement are needed to stay ahead of adversaries.

To take this further with guided labs and an instructor, see our cyber security training at WebAsha.

Related reading

• Operation Bunyanun Marsoos | Pakistan’s Military and Cyber Attack on India Explained (May 2025)
• Russian Turla Hackers Exploit Pakistani Hackers to Target Afghanistan and India
• Iran-Linked Hackers May Target U.S. Firms & Infrastructure in 2026 | Government Warning

Reference

For the authoritative details, see CERT-In (India).