VULNpocalypse
Breaches and incidents

NIA / Gujarat ATS (India): AnonSec DDoS case over attacks on 54 central government websites during Operation Sindoor

Gujarat ATS arrested Jaseem Shahnawaz Ansari of Nadiad and booked a juvenile in May 2025 for over 50 DDoS attacks on central and state government sites...

Disclosed
Verification
Confirmed by two or more outlets

What happened

  • Gujarat ATS arrested Jaseem Shahnawaz Ansari of Nadiad and booked a juvenile in May 2025 for over 50 DDoS attacks on central and state government sites (defence, finance, aviation, urban development) in April and May 2025, about 20 of them on 7 May 2025, posted to the Telegram channel AnonSec (earlier EXPLOITXSEC). The NIA took the case (registered 25 Jun 2025) and on Monday 24 Aug 2026 searched five locations (Junnar, Nadiad, Ramagundam, Gopalganj, Delhi), seizing 3 laptops and 5 phones; two accused are arrested.
  • Technique per ATS: DDoS scripts cloned from GitHub run from Android using Termux and Pydroid, with check-host.net used to confirm downtime.
  • Attacker: AnonSec members (Indian nationals per ATS); NIA says the attacks targeted Critical Information Infrastructure.
  • Response: charged under IT Act 43 and 66F (cyber terrorism); NIA investigation ongoing.

Sources