India Among Top Targets for Global Cyber Threats, Warns Microsoft Official
New Delhi: As India continues its rapid digital transformation, it has emerged as a high-stakes arena for cybercriminals and state-sponsored actors. Nicholas Butts, Director of AI and Cybersecurity Policy at Microsoft, highlighted the country’s vulnerability during his address at the NDTV World Summit 2026, revealing that India currently ranks as the seventh most targeted nation globally and the third most targeted within Asia.
Using a “leaky roof” analogy, Butts emphasized that cyber threats are not distant, futuristic concerns but immediate dangers requiring urgent attention. “The threat is very real to India,” he stated, stressing that the scale of malicious activity is immense. Microsoft’s global monitoring systems process roughly 165 trillion telemetry signals daily, blocking millions of new malware files to shield its vast user base from potential breaches.
Escalating State-Sponsored Espionage
Butts pointed to a growing sophistication in how nation-states exploit digital vulnerabilities. He specifically highlighted “Storm 0940,” a Chinese state-sponsored actor recently identified by Microsoft, whose primary operations revolve around data theft and systematic espionage.
Furthermore, he discussed the rise of “Storm 3168,” also known as Jadepuffer. This China-based ransomware collective has moved beyond manual attacks, increasingly deploying AI agents to conduct global strikes. These automated systems allow attackers to scale their efforts, making it increasingly difficult for traditional defenses to keep pace.
The Rise of AI-Powered Criminal Infrastructure
Beyond the actions of nation-states, Butts warned about the “democratization” of high-level cybercrime enabled by Artificial Intelligence. He cited the emergence of “EvilTokens,” a threat actor group that utilized a mix of open-source and closed-source models to build a totally autonomous criminal infrastructure.
In this model, two individuals were able to “vibe-code” a sophisticated platform that sold illegal access for a modest $1,500 entry fee and a $500 monthly subscription. This automated “crime-as-a-service” model successfully compromised over 10,000 organizations across 120 countries, demonstrating how AI lowers the barrier to entry for even low-level criminals to execute large-scale, expensive cyber campaigns.
A Call for Vigilance
The Microsoft official urged stakeholders to recognize that the threat landscape is evolving faster than ever before. With attackers leveraging AI to conduct more efficient ransomware campaigns and espionage, the security paradigm must shift from reactive patches to proactive, intelligence-led defense strategies.
Butts concluded by underscoring that the massive influx of data processed by tech giants provides a unique vantage point, but the burden of security remains a shared responsibility. For India, a nation aggressively digitizing its financial, governance, and infrastructure sectors, the message from the summit was clear: in an age of AI-driven threats, constant vigilance is the only way to prevent a catastrophic breach.
Disclaimer: This content is auto-generated for informational purposes only.
Source: Read Original News
