Cyber Crime Wing of T.N. police issues alert against phishing links disguised as news on Operation Sindoor

The groups involved in this type of cyber attack use sophisticated tactics, such as sending phishing emails, fake login pages, and malicious attachments to gain unauthorised access to sensitive information

In the wake of escalating tensions between India and Pakistan, there is an elevated risk of cyber attacks, particularly advanced persistent threats, known for targeting Indian government agencies, military personnel, and critical infrastructure.

The Cyber Crime Wing of the Tamil Nadu Police has issued an advisory to the public about a recent surge in malicious content, spreading rapidly through WhatsApp, email, and social media platforms, with respect to Operation Sindoor.

The groups involved in this type of cyber attack use sophisticated tactics, such as sending phishing emails, fake login pages, and malicious attachments to gain unauthorised access to sensitive information. Advisories regarding these threats have already been issued to all government departments in the State, the police said.

The contents of these emails and attachments include deceptive videos, images, .exe/.apk files, and phishing links disguised as news or updates related to the ongoing Indo-Pak conflict.

Threat actors are exploiting heightened public interest and tension around the situation to target unsuspecting individuals with malware, fake news, and cyber scams, said Additional Director General of Police, Cyber Crime Wing, Sandeep Mittal.

‘Malicious content’

These cybercriminals are circulating malicious content under the pretext of exclusive updates, conflict-related visuals, or leaked footage, with many of these materials carrying malware, spyware, or links to phishing websites. They can be in the form of links or even photographs sent from unknown numbers or forwarded on WhatsApp, Telegram, or other social media platforms.

The advisory from the police said cyber criminals embed phishing links in messages that appear to come from trusted sources to steal personal data through phishing websites designed to look like legitimate news or government sources. They spread APK (Android Package) files labelled as apps or tools (e.g., “live war updates app”), which, once installed, can steal data, access device files, or lock phones with ransomware and demand payment, the advisory said.

Once these malicious links/image/.exe/.apk files are downloaded, a malware is installed, which can compromise the device and hack into bank accounts or social media profiles. Mr. Mittal said, “We are working with the Union Home Ministry’s Indian Cyber Crime Coordination Centre to block such links and prevent them.”

Published - May 10, 2025 12:32 pm IST