Newindianexpress Ransomware Attack Disrupts TG-iPASS Portal in Telangana
Article Content
- •TG-iPASS portal offline due to suspected ransomware attack.
- •Database files encrypted with a '.vgb' extension; ransom note found.
- •Investigation launched by Telangana Cyber Security Bureau.
The TG-iPASS portal, a key government-to-business service in Telangana, went offline following a suspected ransomware attack on October 22, 2026. The portal's database and related files were encrypted, with affected files renamed with a '.vgb' extension. A ransom note was found on the server, but no monetary demand was made. The Telangana Cyber Security Bureau (TGCSB) has initiated a criminal investigation and is working to restore services using backups. The attack has raised concerns about the adequacy of existing security measures. As of now, the portal remains inaccessible, and officials are conducting a forensic investigation to assess the scope of the attack and potential data exfiltration.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Cloud4C in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What services are affected?
Is there a timeline for restoration?
What steps are being taken to investigate?
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…