Pakistan-linked hackers may target India’s defence sector, officials say

New Delhi: India’s intelligence agencies have indicated that Pakistan’s Inter-Services Intelligence is preparing a series of cyber attacks aimed at critical infrastructure in the country. According to inputs gathered by the Intelligence Bureau, the objective is to disrupt essential systems linked to defence and financial institutions.
Officials said that a number of meetings were held by ISI operatives in the past week to strategise these operations.
Pakistan cyber force and hacker groups activated
Sources added that the ISI is working with its Pakistan Cyber Force to execute the plan. Intelligence officials have noted a recent spike in activity, with several groups being mobilised for potential attacks.
Security agencies had earlier assessed at the end of 2025 that cyber threats from Pakistan-based hackers would be among the primary concerns in 2026. Groups such as “Cyber Group HOAX1337” and “National Cyber Crew” are believed to be involved. These outfits have reportedly been used in similar operations in the past.
Defence sector remains primary target
Officials indicated that the defence sector is likely to be the main focus of these efforts. The aim, they said, is not only to disrupt systems but also to access sensitive data.
Alongside cyber operations, the ISI has activated its espionage wing to gather classified information, with defence installations being a key area of interest.
Espionage activities and surveillance concerns
Investigations have also revealed attempts to gather intelligence related to railway infrastructure. According to inputs from a probe by Ghaziabad police, certain individuals allegedly set up solar-powered closed-circuit television cameras to transmit live footage to handlers based in Pakistan.
Two-pronged strategy: cyber disruption and disinformation
Officials said that the ISI appears to be pursuing a dual strategy. While hacker groups are expected to focus on disrupting defence-related systems, a parallel disinformation campaign is also being planned.
With elections scheduled in several states this month, agencies believe such campaigns could intensify during this period, making it an opportune moment to spread misleading narratives.
Concerns over hoax calls and panic campaigns
Authorities have also warned of a possible increase in hoax calls and false messaging. Amid global uncertainty linked to the conflict in the Middle East, which has affected flights and driven up oil prices, there are concerns that misinformation about fuel and LPG costs could be circulated to trigger panic among consumers.
Officials said such narratives could lead to panic buying and even encourage black marketing.
Government countering misinformation
The Indian government has been actively issuing clarifications and fact-checks to counter false information circulating through Pakistan-based social media handles.
Education and aviation sectors also under watch
Agencies have flagged the possibility of hoax messages targeting the education and aviation sectors. These areas are considered particularly sensitive, as misinformation here can quickly create widespread alarm.
Long-term focus on intelligence gathering
Despite the range of tactics, officials said that gathering intelligence on India’s defence capabilities remains a top priority for these groups. Considerable financial resources are believed to be allocated for such operations.
An earlier assessment in 2019 indicated that the ISI had set aside approximately Rs 3,000 crore annually for activities including cyber attacks, espionage and honey trapping.
Allegations of propaganda efforts
Officials also alleged that the ISI has been involved in planting misleading narratives about India in sections of Pakistan’s media. Social media accounts linked to the agency are reportedly being used to amplify such content and shape public perception.
IANS inputs