Hackers Weaponize Balochistan Police Portal in Multi-Group Espionage Campaigns

Cybersecurity researchers have revealed a prolonged cyber espionage campaign targeting Pakistani law enforcement organizations, including the Balochistan Police. The campaign, which is believed to involve threat actors aligned with China and India, took place between February 2024 and April 2026. The attackers compromised servers hosting web applications that manage sensitive data, such as police and citizen information, as well as criminal records. These compromised assets were used in multi-group espionage campaigns. The targeted organizations include several Pakistani law enforcement entities. The attackers' use of the compromised Balochistan Police portal is a key aspect of the campaign.