Multi-Group Cyber Espionage Campaigns Exploit Balochistan Police Portal

Cybersecurity researchers uncovered sustained espionage campaigns targeting Pakistani law enforcement agencies, leveraging compromised Balochistan Police portal infrastructure to deploy malware like PlugX, ShadowPad, and Remcos RAT. The attacks, linked to China- and India-aligned threat actors, exploited web applications to access sensitive data and expand their reach through citizen-facing platforms.

Cybersecurity researchers have disclosed details of sustained cyber espionage activity against several Pakistani law enforcement organizations undertaken by suspected China- and India-aligned threat actors between February 2024 and April 2026.

"At Balochistan Police, the compromised assets included servers hosting web applications that manage police and citizen data, such as criminal and

Read original article