Breaches and incidents
Kaveri 2.0 (India): bot traffic and fake accounts cripple Karnataka property registration for over two weeks
The Revenue Department said DDoS-style attacks in December 2024 and January 2025 using bots and fake accounts degraded Kaveri 2.0 across all 252...
- Disclosed
- Verification
- Reported by a reputable outlet, citing the company
What happened
- The Revenue Department said DDoS-style attacks in December 2024 and January 2025 using bots and fake accounts degraded Kaveri 2.0 across all 252 sub-registrar offices; the FIR cites 6.2 lakh malicious Encumbrance Certificate search requests in two hours with random keywords, from 62 email accounts on 14 IP addresses identified by the Centre for Smart Governance (South First). Registrations fell to 556 on 1 Feb against a usual ~8,000 per day.
- Root cause: unauthenticated or weakly gated expensive search endpoints abused at volume.
- Attacker: unidentified.
- Response: restored 5 Feb 2025; IGR K.A. Dayananda filed an FIR with Central CEN police under the IT Act on 7 Feb; Revenue Minister Krishna Byre Gowda announced an independent security audit.