Cyber Review - (February- March, 2025)

National

Bharat launched deepfake detection technology— Vastav AI

On 10 March 2025, Zero Defend Security introduced Vastav AI, Bharat’s pioneering deepfake detection system, representing a notable advancement in cybersecurity. This cloud-based platform utilises sophisticated machine learning, forensic analysis, and metadata inspection to accurately identify AI-generated videos, images, and audio with an accuracy rate of 99 per cent. Intended for use by law enforcement agencies, media organisations, and cybersecurity firms, Vastav AI is designed to address the escalating threat posed by deepfake content and misinformation. The technology was demonstrated at the CIDECODE hackathon organised by CID Karnataka and PES University, where it was acknowledged for its potential to enhance digital content verification processes.^[1]

Government enhancing national cybersecurity preparedness

To strengthen cybersecurity preparedness, the Government of Bharat has launched multiple initiatives involving key entities such as the National Cyber Security Coordinator (NCSC) and the National Cyber Coordination Centre (NCCC) for inter-agency coordination and real-time threat detection. CERT-In plays a central role by operating platforms for cyber threat intelligence sharing, issuing regular advisories, conducting cyber crisis management drills, and providing security guidelines and training. The Cyber Swachhta Kendra offers free tools and tips to citizens for malware detection and removal. The Indian Cybercrime Coordination Centre (I4C), set up by the Ministry of Home Affairs, addresses cybercrimes holistically. Further, the government has released specific guidelines on secure software development, implemented a Software Bill of Materials (SBOM) framework, and empanelled security auditors to ensure compliance. Public awareness is promoted through educational content and nationwide campaigns hosted on dedicated portals, fostering a culture of cyber hygiene across all sectors.^[2]

540 Bharatiyas detained from ‘Cambodia Scam’ farms repatriated to Bharat

In one of the largest operations to date, at least 540 Indian nationals employed by scam farms were detained in Cambodia and repatriated to India via aircraft organized by the Indian Air Force (IAF). The Cambodian authorities contacted their Indian counterparts, leading the Ministry of External Affairs (MEA) to facilitate the return of these individuals.

“These individuals are from different states and have been working in Cambodia for a long time. While some were lured to these multi-storey complexes in Cambodia under the pretext of data entry jobs—only to have their passports confiscated and be forced into a round-the-clock, multi-billion-dollar scam industry as cyber slaves—others were fully aware of what they were getting into and they had been sending remittances back home,” read the news report.^[3]

“Bharatiya entities may lose ₹20,000 crore to cyber-crimes in 2025”: CloudSEK Report

In its report, cyber security intelligence firm CloudSEK said that Bharatiya entities are expected to lose ₹20,000 crore due to cybercrimes in current year. The report is based on a deep analysis of 200 companies across sectors, over 5,000 domain takedowns, data of about 16,000 brand abuse, official data from the Indian Cyber Crime Coordination Centre (I4C) documenting nationwide cybercrime patterns and financial impacts for artificial intelligence (AI)-based projection. “The biggest revelation from our research is the sheer scale of financial losses of over ₹ 20,000 crore due to cybercrime, of which ₹9,000 crore is due to brand name abuse alone. The fact that brand abuse is implicated in nearly one-third of all cyber-crime incidents and a staggering 70 per cent of high-value scams is a wake-up call for India," said Pavan Karthick M, Threat Intelligence Researcher at CloudSEK.^[4]

Bharat’s cybersecurity firewall most breached by hacktivists

According to the "High Tech Crime Trends Report-2025" by Group-IB, India has emerged as the primary target for hacktivist attacks in 2024, accounting for approximately 13 percent of global incidents. The country is closely followed by Israel at 7 percent and is now at the forefront of growing cybersecurity threats, raising concerns over the increasing frequency and severity of cybercrime in the region, the report indicated.

In the Asia-Pacific region, India accounted for 49.3 percent of the "hacktivist" attacks, while Indonesia came a distant second at 14 percent. Educational institutions were the hardest hit in these attacks.^[5]

International

North Korea unveiled new military unit targeting AI-enabled attacks

According to news report Daily NK, North Korea has established “Research Centre 227” which reportedly plans to operate 24x7 to immediately respond to real-time information from North Korean intelligence agency. The research centre 227 is likely to be focussed on “strengthening hacking capabilities” and develop hacking technologies and programmes to neutralise western cybersecurity systems and critical infrastructure. These offensives will primarily aim to steal information and disrupt adversary computer networks. “These are not cyber warriors who directly carry out information warfare missions in foreign locations, but internal research staff who develop offensive programs. With the establishment of Research Center 227, the RGB’s cyber operational capabilities will be significantly strengthened in the future,” reported news.^[6]

Europol warned of AI-driven crime threats

Europol has issued a warning about the growing threats posed by Artificial Intelligence (AI)-driven crime, highlighting how organised crime gangs are leveraging advanced technologies to enhance their global operations. The agency’s report notes that AI allows these criminals to craft multilingual messages, create realistic impersonations, and automate processes, complicating detection efforts. Criminals are using generative AI to produce child sexual abuse material. “The very DNA of organised crime is changing. Criminal networks have evolved into global, technology-driven criminal enterprises, exploiting digital platforms, illicit financial flows, and geopolitical instability to expand their influence,” said Catherine De Bolle, Europol’s Executive Director.^[7]

Türkiye adopted first cybersecurity law

The Cybersecurity Law (No. 32846) went into force in Türkiye on 19 March 2025, after its introduction to the Turkish parliament on 10 January. The Cybersecurity Law aims to protect digital infrastructure by defining key terms like cybersecurity, cyber incident, and cyber-attack. It outlines principles for national security, focusing on protecting critical infrastructure and information systems, and creating a secure cyberspace. The Law stresses institutionalisation, continuity, and sustainability with security measures applied throughout the lifecycle of services and products.^[8]

U.S. Department of State will use AI to revoke students visas of pro-Hamas sympathisers in the U.S. universities

“The United States (U.S.) Secretary of State—Marco Rubio advocated for an AI-enabled ‘catch and revoke’ effort to cancel the visas of foreign nationals studying in U.S. universities, who appear to support Hamas or other designated terror groups,” a senior State Department officials informed Axios. The programme will examine internal databases to see whether any visa holders were arrested but allowed to stay in the country during the Biden administration. The officials are also checking news reports of anti-Israel demonstrations and Jewish students’ lawsuits that highlight foreign nationals allegedly engaged in antisemitic activity without consequence. The State Department is working with the departments of Justice and Homeland Security in what one senior State Department official referred as a ‘whole of government and whole of authority approach.’^[9]

“Hackers accessed details of around 18,000 organisations”: NTT Communications

Japanese telecommunication company, NTT Communications (NTT Com), has confirmed that data from nearly 18,000 corporate entities was hacked during a cyberattack in February 2025. The compromised data includes customer names, contract numbers, phone numbers, email addresses, physical addresses, and service usage information for 17,891 organizations. NTT Com has not disclosed the number of individual employees affected by the breach or provided details about the companies whose data was stolen. NTT Com serves over 100,000 corporate clients in 70 countries globally.^[10]

Endnotes

^[1]Kumar, Viraj. “Deepfake no more! Vastav AI can detect AI-generated photos and videos in seconds”, Times Bull, 12 March 2025, available from: https://www.timesbull.com/gadgets/deepfake-no-more-vastav-ai-can-detect-ai-generated-photos-and-videos-in-seconds-438622.html [2]
^[2]“Government Taking Measures to Strengthen National Preparedness Against Cybersecurity Threats”, Press Information Bureau- Ministry of Electronics and IT, 26 March 2025, available from: https://pib.gov.in/PressReleasePage.aspx?PRID=2115416 [3]
^[3]Bhardwaj, Ananya. “In a first, 540 Indians detained from Cambodia scam farms to be repatriated on 10 March”, ThePrint, 09 March 2025, available from: https://theprint.in/india/in-a-first-540-indians-detained-from-cambodian-scam-farms-to-be-repatriated-on-10-march/2540665/ [4]
^[4]PTI. “Indian entities may lose ₹20,000 cr to cyber-crimes in 2025: CloudSEK Report”, The Economic Times, 01 March 2025, available from: https://economictimes.indiatimes.com/industry/banking/finance/indian-entities-may-lose-rs-20000-cr-to-cyber-crimes-in-2025-cloudsek-report/articleshow/118651127.cms [5]
^[5]Gupta, Surajeet Das. “India’s cybersecurity firewall most breached by hacktivists, shows data”, The Business Standard, 09 March 2025, available from: https://www.business-standard.com/india-news/india-s-cybersecurity-firewall-most-breached-by-hacktivists-shows-data-125030900711_1.html [6]
^[6]Jennings-Trace, Ellen. “North Korea unveils new military unit targeting AI attacks”, Tech Radar, 21 March 2025, available from: https://www.techradar.com/pro/security/north-korea-unveils-new-military-unit-targeting-ai-attacks [7]
^[7]Reuters. “Europol warns of AI-driven crime threats”, Reuters, 19 March 2025, available from: https://www.reuters.com/world/europe/europol-warns-ai-driven-crime-threats-2025-03-18 [8]
^[8]“Türkiye adopts first Cybersecurity Law”, CMS Law-Now, 28 March 2025, available from: https://cms-lawnow.com/en/ealerts/2025/03/tuerkiye-adopts-first-cybersecurity-law [9]
^[9]Caputo, Marc. “State Dept. to use AI to revoke visas of foreign students who appear ‘pro-Hamas’”, Axios, 06 March 2025, available from: https://www.axios.com/2025/03/06/state-department-ai-revoke-foreign-student-visas-hamas [10]
^[10]Page, Carly. “Japanese telco giant NTT Com says hackers accessed details of almost 18,000 organisations”, 07 March 2025, available from: https://techcrunch.com/2025/03/07/japanese-telco-giant-ntt-com-says-hackers-accessed-details-of-almost-18000-organizations/ [11]