Cyber Crime Alert: Latest India Cybercrime Stories Shaking the Nation

Post Views: 20

India’s cyber and technology landscape is evolving across financial crime, quantum-resistant payments, government-linked infrastructure security, AI-enabled border defence and emerging risks from frontier AI.

India’s IT Ministry is developing enhanced protocols for AI incident reporting

Officials have confirmed that incidents involving autonomous AI systems operating outside their intended parameters fall under the broader cybersecurity incident framework. This initiative could establish an Indian AI Incident Response & Reporting system similar to conventional cyber-incident reporting mechanisms. A mature framework would need to differentiate between various AI-related events.

Bengaluru cybercrime investigation initiated after a ₹93.6-lakh investment fraud

A Bengaluru cybercrime investigation initiated after a ₹93.6-lakh investment fraud uncovered 507 suspected mule bank accounts connected to cybercrime complaints across multiple states. Three individuals have been detained, and six mobile devices seized. The investigation revealed a sophisticated operational method involving the procurement of current, corporate, and trust accounts alongside net-banking credentials and SIM cards. Account holders were reportedly placed in hotels where ZNPAY/SMS-forwarding APKs were installed to remotely intercept banking OTPs and SMS messages. Investigators identified 51 additional APKs and forwarded them to I4C for analysis. Binance wallets, Telegram, and Botim are part of the probe, with preliminary IP analysis pointing to locations in Kolkata, Hong Kong, and California. These international indicators require further verification. This case highlights a Mule-Account-as-a-Service infrastructure, demonstrating a structured process: account acquisition → SIM distribution → SMS-forwarding APK deployment → remote OTP interception → net banking access → fund layering → cryptocurrency conversion → overseas control. Advanced techniques such as APK reverse engineering, device forensics, IMEI/IMSI correlation, bank telemetry, IPDR, and blockchain analysis could reveal more network details.

Indian Army expanding AASHVAST program to six laboratories

The Indian Army is expanding the AASHVAST program—Assessment and Analysis of Electronic Systems Hardware for Vulnerabilities and Security Threats—to six laboratories nationwide. A facility in Delhi is already operational, with five more planned. Military drones will undergo security inspections, with CCTV systems expected to follow. Unlike traditional physical checks, AASHVAST evaluates firmware and embedded systems for hidden commands, embedded passwords, encryption keys, remote-access mechanisms, and time- or location-triggered behaviors. The initiative addresses concerns about potentially insecure foreign-origin components, particularly from China, in military UAS. This marks a shift toward institutionalizing hardware and firmware digital forensics for defense procurement. A drone may appear compliant physically but could contain software capable of geofencing, remote control, data exfiltration, or mission disruption. The same security principles apply to police drones, body cameras, CCTV systems, and IoT sensors used by law enforcement.

Enforcement Directorate conducts searches in Chennai and Tirupur

The Enforcement Directorate conducted searches at six locations in Chennai and Tirupur on 18 September as part of a PMLA investigation into an alleged ₹116.79-crore fraud involving Indian Overseas Bank and PGC Corporation Ltd. The probe stems from a CBI case, with authorities seizing ₹82 lakh in unexplained cash, two luxury vehicles, laptops, pen drives, mobile phones, and property documents. The company’s loan account was classified as an NPA in 2013 and declared fraudulent in 2020. The allegations remain under investigation.

Belgian cybersecurity firm Aikido Security introduces Altar AI model

Belgian cybersecurity firm Aikido Security has introduced Altar, an open-weight AI model tailored for cybersecurity and designed for local deployment. Organizations can use the model without transmitting sensitive source code to external providers. Based on a compressed version of Z.AI’s GLM-5.3, the model is intended for use in sectors such as banking, with Belgian bank Belfius as a potential early adopter. This development underscores a trend toward sovereign or locally hosted AI for cybersecurity. Sensitive data like source code, malware samples, and vulnerability information often requires on-premises processing to minimize exposure risks. Locally hosted security models can support vulnerability analysis and secure-code reviews if properly governed.

Emerging investigative framework integrating forensics into technology stack

The recurring theme across these developments is the deepening integration of forensics into the technology stack. Law enforcement now traces malicious APKs and remote OTP infrastructure alongside bank accounts; the military shifts from physical inspections to firmware analysis; financial investigators combine accounting trails with digital device evidence; and AI governance evolves to treat machine actions as reportable incidents. The emerging investigative framework increasingly follows the path: money → identity → device → application → firmware → AI agent.