Ransomware Attacks Rise in India Defence Sector

AI has not only increased the speed of work but also accelerated cyber attacks severalfold. Earlier, attackers took several days to target a system, but with the help of AI, they are now finding system vulnerabilities and stealing information much faster.

According to Microsoft's Digital Defence Report 2026, India is among the world's top seven cyber-affected countries. India accounted for 2.5% of the cyber threats tracked worldwide. Ransomware attacks increased fivefold over the past year.

Users' systems are being hacked by displaying fake CAPTCHAs while they shop online and browse the web. Companies are also being targeted through services such as Microsoft Teams, with attackers making phone calls or posing as IT support staff. Voice phishing on Teams increased by 502% in one year, while attacks involving fake CAPTCHAs rose nearly eightfold.

The trend has changed... cyber attacks are increasing through these three methods

1. QR codes: A QR code is sent in an email or PDF. As soon as the user scans it, they may fall victim to a cyber attack. Microsoft detected 14.5 crore QR phishing attacks in one year.

2. Fake CAPTCHAs: A message such as "I am not a robot" or a fake error/update message is displayed on the website, prompting the user to copy and paste a command. Such activity was detected on 11 lakh devices.

3. Attacks impersonating bosses or HR: Attackers no longer copy only banks or companies; they impersonate an employee's boss, HR, payroll team, vendor or business partner to launch attacks. Someone's identity was copied in 85% of the phishing emails reported between April and June 2026.

For the first time... AI has enabled cyber attacks of this kind

32-step attack without assistance: Several AI agents worked together to devise a 32-step cyberattack plan against a company's network and carried it out on their own. Servers and user accounts were taken under control. The attack took place in a laboratory test.

Automated Ransomware Extortion: The first automated ransomware, called 'ZedPher', emerged in July 2026. This means AI is not just helping with attacks but is moving towards running the entire ransomware process itself.

Immediate Attacks on Software Vulnerabilities: The average time between a software vulnerability being discovered and a cyberattack targeting it has fallen to less than 24 hours. Previously, companies had more time to fix such vulnerabilities.

Digital Workforce: 130 crore AI Agents in 2 Years

Companies are rapidly increasing their use of AI agents. While 88% of companies are experimenting with AI agents, 82% of leaders plan to increase their use over the 12 to 18 months.

According to the report, the number of AI agents could reach 130 crore in two years. AI agents can perform tasks such as handling emails, managing calendars, updating systems and accessing data.

As their numbers increase, the cyber threat is also growing. If an AI agent is attacked, access can also be gained to the systems and data connected to it.