The National Investigation Agency (NIA) on Monday conducted searches at five locations across Maharashtra, Gujarat, Telangana, Bihar and Delhi in connection with a cyber-terrorism case involving attempted DDoS (distributed denial of service) attacks on 54 Indian government websites and targeting of critical information infrastructure (CII) during Operation Sindoor last year.
The federal agency’s case is based on an FIR registered by the Gujarat Police in June last year.
Operation Sindoor was India’s direct military response to the April 22, 2025, terror attack in Pahalgam, Kashmir, in which 26 people were killed, making it the deadliest attack on civilians since the 26/11 Mumbai attacks. Indian forces launched the operation in the early hours of May 7, targeting nine terror camps in Pakistan and Pakistan-occupied Kashmir (PoK).
The pre-dawn strikes, in which at least 100 terrorists were killed, triggered a series of attacks and counter-attacks along the western border involving fighter jets, missiles, armed drones and intense artillery and rocket exchanges. On the night of May 9-10, the Indian Air Force struck targets at 13 Pakistani air bases and military installations. After four days of hostilities, the fighting was halted on May 10 evening following an understanding between the two countries.
Detailing the cyber attacks, the NIA said the accused had “attempted sophisticated DDoS attacks against 54 websites of government of India entities, targeting critical computer resources and Critical Information Infrastructure (CII) during the period of Operation Sindoor, with intent to compromise national sovereignty, security and unity, and to incite public fear.”
{{/usCountry}}Detailing the cyber attacks, the NIA said the accused had “attempted sophisticated DDoS attacks against 54 websites of government of India entities, targeting critical computer resources and Critical Information Infrastructure (CII) during the period of Operation Sindoor, with intent to compromise national sovereignty, security and unity, and to incite public fear.”
{{/usCountry}}The searches were conducted at Junnar in Pune, Nadiad in Gujarat’s Kheda district, Ramagundam in Telangana’s Karimnagar district, Gopalganj in Bihar and Delhi.
“During the course of investigation, suspects who provided support and assistance to the accused in the preparation and skill upgradation for carrying out the DDoS attacks were identified through thorough technical analysis,” the NIA said. Searches were conducted at their premises after warrants were issued by the competent court.
The agency said it recovered several digital devices and documents containing incriminating material linked to hacking activities.