Cyber Threat Actor: Hunter Gujjar

Hunter Gujjar is a threat actor persona operating from Pakistan, known for conducting cyber attacks against Indian targets. The primary public attribution for this actor stems from a series of website defacements targeting police portals in the Indian state of Madhya Pradesh. The most documented incident occurred on November 28, 2015, when the official website of the Jabalpur police was compromised. The attackers replaced the site's content with messages displaying Pakistani flags and slogans framed as revenge for Indian operations, explicitly linking the act to a Pakistani nationalist motive. This specific defacement was identified as the third such breach of Madhya Pradesh police web properties by the same group, establishing a pattern of repeated targeting against this regional law enforcement sector.

The strategic objective demonstrated in the attributed activity is disruptive and politically motivated, aimed at public humiliation and propaganda rather than financial gain or data theft. The chosen targets are government websites, specifically within the Indian police sector at a regional level, indicating a focus on nationalistic messaging directed at Indian state institutions. The tactics employed involve website defacement, a low-complexity technique used to broadcast symbolic slogans and imagery. No malware families, specific initial access vectors, or broader tooling styles are detailed in the available incident summary. There is no publicly established evidence in the provided material linking Hunter Gujjar to a specific state intelligence apparatus or a formal criminal consortium; the attribution remains tied to the alias and the self-proclaimed Pakistani identity used during the attacks. The Jabalpur police defacement represents a significant, publicly reported operation that illustrates the actor's campaign of targeting Indian government web assets for disruptive, nationalist messaging.