Cyber Incident Victim: Ram Mohan College
Date:
Oct 2015
Location:
India
Summary
Websites of multiple Kolkata colleges, including Ram Mohan College, were compromised by a hacker group identifying as 'Virushacker' from Pakistan, resulting in defacement with black flags, images of a burning Indian flag, and anti-India slogans such as 'Shiv Sena Murdabad' and 'Pakistan Zindabad'. The Cyber Police Station at Lalbazar initiated efforts to restore the affected websites and investigate the breach, though no formal complaints had been filed by the institutions at the time of reporting.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On October 31, 2015, authorities at Ram Mohan College, Maharaja Manindra College, and Anandamohan College in Kolkata discovered their institutional websites had been compromised after black flags and defacement content appeared on their screens. The attack occurred on a Friday, with the hacker group 'Virushacker' claiming responsibility and identifying themselves as Pakistani actors. Attackers replaced legitimate website content with images of a burning Indian flag accompanied by inflammatory slogans including 'Shiv Sena Murdabad' and 'Pakistan Zindabad'. This visual defacement rendered the college websites inoperable for standard informational and administrative purposes. The incident impacted multiple educational institutions simultaneously, though the exact technical method of intrusion remained unspecified in initial reports. College administrators detected the breach through visible alterations to their web interfaces rather than through automated security alerts.
The Cyber Police Station at Lalbazar, Kolkata Police headquarters, initiated response measures upon learning of the widespread compromise, prioritizing website restoration and forensic analysis. Investigators confirmed they were working to determine the total number of affected colleges, as no formal complaints had yet been filed by institutional administrators at the time of initial police action. Technical teams focused on removing malicious content and restoring original website functionality while attempting to trace the attack's origin. The defacement's political messaging and transnational attribution introduced jurisdictional complexities to the investigation. Operational disruptions persisted until recovery efforts could be completed, though no data theft, financial impacts, or secondary attack vectors were reported in connection with the incident. Police officials publicly acknowledged the ongoing investigation but did not disclose specific remediation timelines or digital evidence collection details.