Archive · 14 Aug 2025
Pakistani Hackers Infect Millions, Steal Credentials, Earn Millions
A cybercrime group from Pakistan used fake software to trick people into downloading bad programs.
These programs stole passwords and other important info from over 1.8 million devices.
The hackers made about $4.67 million.
They spread the bad programs through fake websites that offered cracked versions of popular software.
They were caught when they got hacked themselves.
The timing of the attacks lined up with India's Independence Day, and targeted government systems.
A Pakistan-based cybercrime network infected 1.88 million devices using pirated software.
The network, linked to family connections in Bahawalpur and Faisalabad, distributed malware through malicious websites.
Attackers used SEO poisoning, forum spam, and paid advertising to spread malware.
The operation involved over 5,000 affiliates and generated an estimated $4.67 million in revenue.
Findings coincided with a surge in cyberattacks on Indian government bodies before Independence Day.
- Who
- A Pakistan-based cybercrime network, allegedly run by family connections, was responsible.
- What
- A Pakistan-based cybercrime network used pirated software to infect devices and steal credentials.
- When
- The malware operations were active for years, with a surge of attacks before India's Independence Day in August 2025.
- Where
- The cybercrime network originated in Pakistan, with distribution sites worldwide.
- Why
- The attackers sought to steal credentials, harvest data, and potentially disrupt government systems.
- Infected Devices
- 1.88 million
- Estimated Revenue
- $4.67 million
- Affiliates Involved
- 5,239
- Distribution Sites
- Nearly 3,900
- Primary Malware
- Lumma Stealer, Meta Stealer, AMOS
- Attack Target
- Indian government bodies and critical infrastructure