India's cyber threat desk
Signal before noise.
CyberShitty.com tracks the breaches, fraud waves, ransomware crews and exploited vulnerabilities hitting India — and the global threats Indian teams need to know — with every claim linked to its source.
01 / India desk
What's hitting India
Fake village health camps took Aadhaar data and biometrics to get 3,000 SIMs, police say
WhatsApp 'boss' scam: Mumbai police arrest six; accounts linked to 255 complaints, ₹72 crore
Supreme Court: RBI's new rules must make banks compensate digital arrest victims when they fail
'MR ROBOT' kit rents out fake bank, bill and challan apps that steal OTPs and divert calls
ED arrests advocate it says bribed officials to unfreeze about 100 fraud-linked bank accounts
02 / Global
Beyond India
Another NetScaler flaw exploited: CVE-2026-88779 hits SAML setups; CISA and CERT-In say patch
Update now: iPhone fix for a targeted zero-day (iOS 26.7.1) and Chrome 154
Bitget loses $387.5 million in 2026's biggest crypto theft yet: what Indian users should know
Ransomware in August 2026: trackers log a record month as Qilin leads
Scams
Scams hitting India right now
SCAM EXPLAINER
Digital arrest scam
Red flags & what to do
SCAM EXPLAINER
Investment and trading scam
Red flags & what to do
SCAM EXPLAINER
Task and part-time job scam
Red flags & what to do
SCAM EXPLAINER
UPI, QR code and collect-request fraud
Red flags & what to do
SCAM EXPLAINER
Sextortion video call scam
Red flags & what to do
SCAM EXPLAINER
Fake customer care number scam
Red flags & what to do
SCAM EXPLAINER
KYC update, SIM swap and eSIM fraud
Red flags & what to do
SCAM EXPLAINER
Illegal loan app harassment
Red flags & what to do03 / Threat pulse
Latest on the wire
04 / Signal, not noise
India's cybercrime, in numbers
lost to cyber fraud reported on NCRP (₹ crore, 2025)
ThePrint — MHA data: Indians lost Rs 22,495 crore to cyber fraud in 2025 (21 Feb 2026)
saved via I4C's CFCFRMS across 32.80 lakh complaints (₹ crore, 2021 to 30 Jun 2026)
MHA — Lok Sabha Unstarred Question No. 251, National Cyber Crime Data (21 Jul 2026)
cyber security incidents handled by CERT-In (2025)
PIB — CERT-In: India's Frontline Defender against Cyber Threats (23 Jan 2026)
bank and FI fraud cases of ₹1 lakh+ reported, involving ₹48,021 crore (RBI, FY2025-26)
Outlook Business (PTI) — RBI Annual Report 2025-26 fraud data (29 May 2026)
05 / Anatomy
How a modern extortion attack unfolds
Stage 01
Initial access: stolen credentials, a phished help desk, or an unpatched edge device
Access
Stage 02
Quiet reconnaissance and privilege escalation using legitimate admin tools
Discovery
Stage 03
Backups located and disabled or deleted
Impact prep
Stage 04
Data staged and exfiltrated to attacker-controlled storage
Theft
Stage 05
Encryption deployed — or skipped entirely in favour of pure data extortion
Extortion
# Latest report / 2026-1030-DF Report / 2026-1030-DF Published / 30 OCT 2026 Region / INDIA Category / THREATS Severity / MEDIUM Sources / 6 LINKED # Defensive record. No victim data.
06 / Malware watch
Capability, not hype
MALWARE / 01
Ransomware
Extortion malware that encrypts systems, and increasingly steals data first, to force a payment after attackers have already gained access.
Detection guidance
MALWARE / 02
Infostealers
Malware that harvests saved passwords, session cookies, tokens and crypto wallets from browsers and apps, then sells them as ready-made access.
Detection guidance
MALWARE / 03
Loaders
Small first-stage malware that gets a foothold, profiles the victim and delivers the next payload, often a stealer, remote access tool or ransomware.
Detection guidance
MALWARE / 04
Remote access tools
Legitimate remote-management software (RMM) and remote access trojans abused to control machines while blending into ordinary IT activity.
Detection guidance
MALWARE / 05
Phishing kits
Rentable phishing-as-a-service kits that proxy real sign-in pages to steal passwords and session cookies, bypassing common MFA.
Detection guidance07 / Reports
More from the desk
2026 / News briefing
Browsers distrust an eMudhra root after weak CA keys; MeitY probes, DSC and eSign unaffected
Open report
2026 / News briefing
SBI discloses 'data loss': 3,897 customer records with personal details found on the dark web
Open report
2026 / News briefing
Telangana cyber bureau arrests 101 in six-state sweep on mule accounts linked to ₹17 crore
Open report
2026 / News briefing
Mumbai police arrest developer accused of 2,805 fake APKs: 'senior citizen card' to challans
Open report08 / Tools
Trackers and guides
CISA KEV / DAILY
CISA KEV 13 Nov 2026: 2 exploited flaws in UnrealIRCd and Check Point
Open KEV digestTRACKER / 48 ENTRIES
Data breaches 2026: the running list
Open trackerGUIDE / WHAT TO DO
Clicked a scam link? What to do depends on what you did next
Read guideGUIDE / WHAT TO DO
Life certificate season: the fake 'pension office' call that asks for your PPO number and OTP
Read guide09 / Coverage
India first. A global view.
Follow the stories that matter to India, wherever they start.
- Sourced reports
- 84
- Coverage desks
- 4
From the published archive · Updated
Explore all 84 reportsVerify
Claims are separated from confirmed facts.
Attribute
Every report links to the primary sources it relies on.
Protect
Victim data is never reproduced for spectacle.
Explain
Threat reporting should make the reader harder to attack.