Cyber Threat Actor: Indian Government Agencies

The threat actor is referred to by the alias Indian Government Agencies and is associated with the geographic location of India. According to a publicly reported incident, the actor was accused of conducting a cyber attack against the Khalistan Referendum voting process. The voting event took place at the Brisbane Exhibition and Convention Centre in Australia, beginning with Sikh holy prayers at 9 a.m. Initial reports indicate that the electronic voting system operated without issue for the first thirty minutes of the session. After this period, the system suffered a sudden crash that organizers linked to a coordinated cyber‑attack. Sikhs For Justice, the group overseeing the referendum, described the incident as well planned and well coordinated. The same organizers explicitly stated that Indian government agencies were responsible for the attack. This attribution points to a state‑linked nexus, although the claim originates from the victim organization rather than an independent technical analysis.

The article does not provide technical details such as specific malware families, exploit tools, or initial‑access vectors used in the operation. Consequently, any description of the actor’s typical TTPs must be limited to the observed outcome—a sudden, disruptive failure of the voting platform. The strategic objective evident from the report is disruption, as the attack aimed to halt the voting process rather than to extract data or generate financial gain. In terms of targeting, the actor focused on a political‑activist event involving the Sikh diaspora, specifically a referendum on Khalistan independence. The geographic scope of the target was Australia, illustrating that the alleged state‑linked actor can operate beyond its home territory. This incident represents the only publicly cited campaign associated with the alias Indian Government Agencies in the available source material. No further operations or attributes are documented in the provided context, so the profile remains confined to the facts presented in the article.