Threat actor
threat_actor:indian_hacker_community
Also: Indian hackers, Indian hacktivists
Collective of Indian hackers described as attacking Pakistani government websites in response to the Pulwama attack.
Collective of Indian hackers described as attacking Pakistani government websites in response to the Pulwama attack.
“Indian hacker community – they took some action.”
“the whole Indian hacker community came together and took this action”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | TARGETS | .gov.pk | Explicit | 51 |
| outgoing | USES | SQL injection | Explicit | 51 |
| outgoing | USES | Data dumping | Explicit | 51 |
| outgoing | USES | Distributed denial-of-service | Explicit | 51 |
| outgoing | USES | Website defacement | Explicit | 51 |
| outgoing | USES | Credential exposure | Explicit | 51 |
| outgoing | USES | Google algorithm manipulation | Uncertain | 51 |
| outgoing | USES | SCADA systems | Uncertain | 51 |
| incoming | INVOLVES | India-Pakistan cyber-conflict | Explicit | 51 |
India-Pakistan cyber-conflict INVOLVES Indian hacker community
The Indian hacker community participated in the cyber-conflict by attacking Pakistani government websites.
Explicit Confidence 98% · Speaker1 EP 51 Details
“Indian hacker community – they took some action. They started attacking Pakistani government websites.”
Indian hacker community TARGETS .gov.pk
Indian hackers looked for Pakistani government websites ending in .gov.pk.
Explicit Confidence 99% · Jack Rhysider EP 51 Details
“They would look for any websites that ended in .gov.pk which is the top-level domain for Pakistani government websites.”
Indian hacker community USES SQL injection
The first Indian hacker Jack describes used SQL injection to enter a Pakistani government website.
Explicit Confidence 95% · Jack Rhysider EP 51 Details
“used SQL injection to get in”
Indian hacker community USES Data dumping
The hackers dumped database contents publicly after obtaining them.
Explicit Confidence 95% · Jack Rhysider EP 51 Details
“took all the stuff from the database, and then publically dumped it for everyone to see”
Indian hacker community USES Distributed denial-of-service
Indian hackers used DDoS attacks against Pakistani government websites.
Explicit Confidence 98% · Speaker1 EP 51 Details
“They were DDossed and some of them were defaced.”
Indian hacker community USES Website defacement
Indian hackers defaced Pakistani government websites and replaced their messages or images.
Explicit Confidence 98% · Speaker1 EP 51 Details
“They were DDossed and some of them were defaced.”
Indian hacker community USES Credential exposure
The cyber-conflict included public posting of usernames and passwords obtained from websites.
Explicit Confidence 94% · Jack Rhysider EP 51 Details
“usernames and passwords posted”
Indian hacker community USES Google algorithm manipulation
Hackers allegedly manipulated Google Images results so a search for best toilet paper showed Pakistani imagery and Imran Khan.
Uncertain Confidence 93% · Jack Rhysider EP 51 Details
“Somehow the hackers rigged the Google algorithm so that if you search Google Images for best toilet paper, it shows a picture of Pakistan’s flag.”
Indian hacker community USES SCADA systems
Some participants associated with the Indian hacker activity were trying to access internet-exposed SCADA-related machinery; the account does not establish that access succeeded.
Uncertain Confidence 82% · Speaker2 EP 51 Details
“There was a few more people who have experience in SCADA.”
“if they are open, if any of the end points is open to the internet, we are trying to hit it and trying to get access to it”