Global Cyber Pulse: 16 April 2025

April 16, 2025 | Cybersecurity
By Ashwani Mishra, Editor-Technology, 63SATS Cybertech

G20 Sherpa Amitabh Kant warns of national disruption from cyberattacks as India digitizes its power grid. China accuses three U.S. NSA agents of hacking the Asian Winter Games. North Korean hackers target crypto developers via LinkedIn, using malicious PDFs and GitHub links. Thales reveals bots now dominate web traffic, with AI-driven bad bots accounting for 51% of activity.

 A whistleblower alleges a Trump-era breach of the National Labor Relations Board’s systems. Meanwhile, Rajasthan police bust a fake Microsoft tech support scam targeting Americans, arresting 13 in a major cross-border cybercrime crackdown.

Amitabh Kant Warns: Cyberattacks Could Cripple National Infrastructure

India’s digital transition—especially in smart grids—is under threat, says G20 Sherpa Amitabh Kant. Speaking in Delhi, he noted that cyberattacks on critical infrastructure like power, healthcare, and satellites have surged, rising 300% between 2021 and 2024. With over 3,000 weekly attacks on Indian firms in 2024 and breach costs nearing $2.8 million, Kant stressed the urgent need for stronger defenses.

He unveiled findings from Lisianthus Tech, highlighting the vulnerability of digital utilities. “Cybersecurity is no longer a luxury—it’s a national stability issue,” Kant said, as India modernizes its energy and communication networks.

China Accuses NSA Agents of Hacking Asian Winter Games

China’s state media has named three alleged U.S. NSA operatives in a cyberattack targeting the 2025 Asian Winter Games in Harbin. According to local police, the accused—Katheryn Wilson, Robert Snelling, and Stephen Johnson—are part of the NSA’s Tailored Access Operations (TAO) unit and allegedly breached event infrastructure and information systems in Heilongjiang.

The announcement, made on Weibo, follows increased cyber-tensions between the U.S. and China. Authorities have issued a bounty for information leading to their arrest, though reward details remain undisclosed. The move marks China’s attempt to publicly counter Western cyber espionage claims.

LinkedIn Scam: North Korean Hackers Target Crypto Developers

Palo Alto Networks’ Unit 42 has flagged a North Korean-linked hacking group, Slow Pisces, for targeting cryptocurrency developers via LinkedIn. Disguised as recruiters, they send fake job offer PDFs that redirect victims to GitHub repositories hosting malware—specifically RN Loader and RN Stealer.

These tools infiltrate systems and exfiltrate sensitive data. The attackers follow a multi-step method, first establishing trust via social engineering before deploying the payload. This sophisticated campaign, active since 2024, reveals how professional platforms like LinkedIn are now being weaponized to exploit the fast-growing Web3 and crypto developer community.

Bad Bots Now Outnumber Humans on the Web, Says Report

Automated bots have overtaken humans in web traffic for the first time in over a decade, according to Thales’ 2025 Imperva Bad Bot Report. Bot traffic made up 51% of all online activity in 2024, driven by a rise in AI-powered malicious bots. Bad bot traffic jumped from 32% to 37%, with 13 trillion malicious requests blocked across global networks.

ByteSpider Bot, operated by TikTok’s parent company, led with 54% of AI-enabled attacks. Applebot, ClaudeBot, and ChatGPT User Bot followed. The findings underscore how generative AI tools are now fueling a new wave of cyber threats.

Whistleblower: Trump-Era Dept May Have Breached Labor Board Security

A federal cybersecurity specialist has accused the former Trump administration’s Department of Government Efficiency (DOGE) of compromising systems at the National Labor Relations Board. In a sworn statement, Daniel Berulis alleges sensitive data may have been illegally extracted. His complaint, submitted to Congress and a whistleblower office, also claims he was intimidated with threats and surveillance.

While NBC News reviewed the document, it has not independently confirmed the details. The allegations come amid lawsuits against DOGE and adviser Elon Musk over unauthorized access to federal networks—a case that could have sweeping political and legal implications.

Rajasthan Police Bust Fake Microsoft Support Scam, Arrest 13

In a major crackdown, Rajasthan police dismantled a cybercrime ring posing as Microsoft tech support. Operating from a hotel in Mandawa, the gang targeted U.S. citizens, duping them under the guise of solving PC issues. Acting on intelligence, a joint team led by DSP Hari Singh Dhayal arrested 13 suspects, including three women.

Seized items included 21 laptops, mobile phones, and internet routers. The gang used VoIP calls and fake pop-ups to lure victims into sharing access and financial data. Authorities say this bust is part of a larger effort to combat tech support fraud in India.