India-Pakistan Cyber Tensions Surge: Your WhatsApp, Facebook, Telegram at Cyber-Attack Risk, Warn BSE, CERT-In

As India-Pakistan tensions escalate, the conflict is spilling over into cyberspace, prompting heightened security alerts across the country. According to cybersecurity agencies, messaging platforms such as WhatsApp, Facebook, and Telegram are being actively exploited by Pakistan-based hackers to launch malware and phishing attacks on Indian citizens and institutions.

The Indian Computer Emergency Response Team (CERT-In), India’s nodal cybersecurity agency, has issued a nationwide alert warning of an increase in cyber threats targeting individuals, businesses, and key sectors like banking and finance. 

Following the alert, the Bombay Stock Exchange (BSE) also issued a cautionary notice to market participants urging them to remain extra vigilant and adopt stronger cybersecurity protocols.

Messaging Platforms Being Weaponized

Officials report that attackers are using deceptive messages sent via WhatsApp, email, Facebook, and Telegram to deliver malware designed to compromise sensitive information, including banking credentials and personal data. In some cases, malware is being disguised as official-looking documents or links that prompt users to download harmful files.

“These are highly targeted campaigns meant to steal data and disrupt operations,” a CERT-In official stated. “Hackers are exploiting popular messaging platforms to maximize reach and impact.”

Banks Strengthen Defenses

Indian banks, especially those with branches near border areas, have increased security measures in anticipation of potential retaliation or espionage efforts. These measures include real-time threat monitoring, improved firewall defenses, and employee training on recognizing social engineering attacks.

“We are conducting regular audits and simulations to ensure we are protected against potential breaches,” said a senior bank executive.

Legal Framework and Government Response

India’s cybersecurity defenses are supported by several key legal instruments, including the Information Technology Act, 2000. Under Section 66, hacking and unauthorized access to computer systems are criminal offenses, while Section 43 penalizes data theft and system disruption.

CERT-In operates under the IT (The Indian Computer Emergency Response Team and Manner of Performing Functions and Duties) Rules, 2013, which empower it to issue alerts and coordinate cyber incident responses. The upcoming Digital Personal Data Protection Act, 2023, further reinforces safeguards for user data and privacy.

Cyber Vigilance Is the Need of the Hour

As cyberwarfare becomes an increasingly central aspect of geopolitical rivalry, Indian citizens and organizations must remain alert. Experts recommend:

• Avoid clicking on unsolicited or suspicious links or files.
• Use two-factor authentication on all communication and banking apps.
• Regularly update software and antivirus systems.
• Report any suspicious activity to CERT-In or local cybercrime units.

India’s digital infrastructure is facing unprecedented threats, and public awareness and institutional preparedness will be critical in defending against these new-age attacks.

Read More: Updates in Refund Filing Process for Recipients of Deemed Export: GSTIN