China and India Target Pakistan's Law Enforcement in Cyber Espionage Campaign

Over a two-year period, hackers linked to China and India infiltrated multiple Pakistani law enforcement agencies, particularly the Balochistan Police. The cyber espionage operations, revealed by SentinelOne, exploited malware disguised as software updates to harvest sensitive data, including biometric records and internal communications. The attacks, which ran from February 2024 to April 2026, underscore a growing distrust from China towards Pakistan regarding the safety of Chinese nationals involved in infrastructure projects. Both countries' hackers operated independently, indicating a fierce competition for intelligence in a region marked by geopolitical tensions. The compromised systems included the Complaint Management System of the Balochistan Police, which managed critical police and public records. The operations highlight the vulnerabilities within Pakistan's digital infrastructure amid rising threats from both neighboring countries.

Key Points: • Chinese and Indian hackers targeted Pakistani law enforcement, focusing on Balochistan Police. • Malware disguised as software updates was used to compromise sensitive police data. • The cyber operations reflect a lack of trust from China in Pakistan's ability to safeguard its interests.