Hacktivist Attacks on South Asian Critical Infrastructure: A Rising Threat

Introduction

In recent years, South Asia has witnessed a notable surge in cyberattacks targeting critical infrastructure, with hacktivist groups at the forefront of this trend. These attacks have escalated from traditional methods to more sophisticated intrusions, posing significant risks to sectors such as energy, water, and healthcare.

Emerging Threat Landscape

Hacktivist groups, driven by ideological motives, have increasingly shifted their focus towards critical infrastructure. According to a report by Cyble, in the second quarter of 2025, 31% of hacktivist activities involved attacks on industrial control systems (ICS), data breaches, and unauthorized access, marking a significant rise from the previous quarter. (industrialcyber.co)

Targeted Sectors in South Asia

In South Asia, the first quarter of 2025 saw the highest number of ICS attacks targeting critical sectors, including:

• Biometrics: Attacks aimed at biometric systems have been prevalent, potentially compromising personal identification processes.

• Building Automation: Cyber intrusions into building management systems can disrupt essential services and safety protocols.

• Electric Power: The energy sector remains a prime target, with attacks on power grids posing risks of widespread outages.

Other sectors such as manufacturing and construction have also experienced heightened malicious activity. (ciso.economictimes.indiatimes.com)

Notable Incidents

A significant incident occurred in 2023 when the All India Institute of Medical Sciences in New Delhi suffered a cyberattack that resulted in the loss of outpatient and research data. This event underscored the vulnerability of healthcare institutions to cyber threats and the potential impact on public health services. (stimson.org)

Attribution and Motivations

While specific attribution remains complex, some attacks have been linked to pro-Russian hacktivist groups. For instance, the Cybersecurity and Infrastructure Security Agency (CISA) has reported that groups like NoName057(16) and Z-Pentest have conducted opportunistic attacks against critical infrastructure entities globally, including in South Asia. (cyber.gov.au)

Mitigation Strategies

To address the escalating threat of hacktivist attacks on critical infrastructure, the following measures are recommended:

• Enhanced Cyber Hygiene: Regular security assessments and timely updates are crucial to protect critical infrastructure. (ciso.economictimes.indiatimes.com)

• Network Segmentation: Implementing strong network segmentation and access control policies can significantly reduce the risk of successful attacks. (westoahu.hawaii.edu)

• Continuous Monitoring: Ongoing monitoring of ICS and SCADA systems is essential to detect and respond to potential intrusions promptly.

Conclusion

The rise in hacktivist attacks targeting critical infrastructure in South Asia presents a medium-level threat that requires immediate attention. By adopting comprehensive cybersecurity measures and fostering collaboration among stakeholders, the resilience of critical infrastructure against such cyber threats can be significantly enhanced.

Highlights:

• Hacktivist attacks escalated in 2025, targeting critical infrastructure | brief | SC Media, Published on Thursday, January 22
• Hacktivism Increasingly Targeting Critical Infrastructure | Security Magazine
• Hacktivist Attacks on Critical Infrastructure Soar: Cyble Report – The Cyber Express, Published on Sunday, November 02