Pakistan’s law enforcement agencies have been under a shadowy cyber attack by Chinese- and Indian-linked espionage groups, a recent SentinelOne study has uncovered. The research findings, which span from 2024 to present day, expose a sophisticated hacking campaign targeting the critical systems of the Balochistan Police department.
As per the investigation, sensitive data, including biometric records, criminal history and hotel and tenant data, stored on Balochistan Police systems have been compromised by the espionage groups, which the research attributes to cyber actors with ties to China and India.
According to SentinelOne analysts, Chinese actors have been tracking threats to Chinese nationals and China-Pakistan Economic Corridor (CPEC) projects following a series of cyber attacks on these targets in the past. In their assessment, these operations reflect efforts to protect and ensure the security of Chinese interests in Pakistan.
In a separate investigation, SentinelOne linked the espionage group to India, attributing them with a strong focus on Pakistan’s security posture in the Balochistan region. Their findings indicate that this Indian-linked group has been involved in monitoring the country’s security dynamics and gathering information pertinent to Pakistan’s stance on insurgent groups.
SentinelOne points out the complex security landscape existing in the disputed region, and how these cyber-espionage operations seem linked to ongoing tensions in the Balochistan region between Pakistan and Indian military as well as alleged support by either side for insurgent groups operating there.
While neither Islamabad nor Beijing have made direct comment on the research, the implications of these developments are stark. The revelation of China- and India-linked cyber-attacks on Pakistani law enforcement systems raises serious questions regarding the country’s cybersecurity readiness and the reliability of its existing security networks.
Pakistan and India have long-standing tensions and rivalries, particularly in regions bordering Balochistan, with accusations of support to insurgent groups in the region adding fuel to the existing fire. Against this backdrop, the hacking operations by these espionage groups may be seen as part of a larger game of cat and mouse between two rival major powers in the region seeking to gather strategic leverage and maintain regional influence.
The cyber-espionage campaign’s discovery underscores the need for Pakistan to strengthen its cybersecurity posture and protect its critical infrastructure from cyber threats, thereby safeguarding sensitive data and maintaining national security.
It’s worth noting the investigation into the matter does not suggest a direct link to any of the country’s official agencies or government departments, instead suggesting an external operation.
