Hackers Weaponize Balochistan Police Portal in Multi-Group Espionage Campaigns

Chinese and Indian-aligned threat actors have been conducting sustained cyber espionage campaigns targeting Pakistani law enforcement organizations, including the Balochistan Police, Khyber Pakhtunkhwa Police, Islamabad Police, and Punjab Safe Cities Authority. The attacks involved deploying various malware families – PlugX, ShadowPad, Cobalt Strike, and Remcos RAT – to steal sensitive data like criminal records, biometric information, and government intelligence. The activity highlights a significant geopolitical risk, with multiple actors converging on the same targets to gather information about Pakistan’s internal security and intelligence operations.