Cyber Incident Victim: Centre for Pakistan and Gulf Studies
Date:
Jan 2016
Location:
Pakistan
Summary
Indian hackers known as Indian Black Hats defaced multiple Pakistani websites, including the Centre for Pakistan and Gulf Studies, as retaliation for a terrorist attack on an Indian military base that killed security personnel. The group dedicated their actions to a deceased Indian commando and his young daughter, leaving tribute messages and images on the affected sites, which primarily involved smaller government-linked institutions and private businesses rather than major state portals. This incident mirrored previous cyber operations by Indian hackers following major attacks linked to Pakistani militant groups.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On January 8, 2016, the Indian hacking group Indian Black Hats (IBH) defaced seven Pakistani websites in retaliation for the Pathankot terrorist attack on the Indian Air Force Station. The attack, which occurred days earlier, involved assailants wearing Indian Army uniforms who killed seven security personnel and one civilian. Among the victims was NSG Commando Lt. Col. Niranjan Kumar, who died while attempting to defuse a grenade during the incident. Indian authorities later confirmed the terrorists were linked to the Jaish-e-Mohammed militant group and had communicated with individuals in Pakistan prior to the assault. IBH dedicated their cyber operation as a homage to Kumar's two-year-old daughter Vismaya and other soldiers killed at Pathankot. The hackers replaced website content with a tribute message and a photograph of Vismaya, framing their actions as a salute to the families of deceased personnel. This marked a continuation of historical tensions, as Indian hackers had previously defaced 125 Pakistani websites following the 2008 Mumbai attacks by Lashkar-e-Taiba militants.
The defacements impacted mid-tier Pakistani organizations rather than critical government infrastructure. Affected entities included the Centre for Pakistan and Gulf Studies, Pakistan Bar Council, SOLP Institute of Modern Languages, and four other organizations spanning government and private sectors: a horse remount institution, a government canteen/store, kitchen appliance retailer FOTILE, and leather goods manufacturer M. Aslam Sons. IBH's defacement message explicitly referenced the Pathankot casualties, stating: "This Attack is dedicated for VismayA... A Small Tribute to those Brave Soldiers who Laid their Precious Life for our Country." No technical details regarding intrusion methods, detection timelines, or containment efforts were disclosed in available reporting. The incident demonstrated how geopolitical conflicts between India and Pakistan frequently manifest in reciprocal cyber operations targeting symbolic rather than strategic assets, with hacktivists leveraging website defacements as propaganda tools following violent attacks.