Cyber Alert: Today’s Biggest Cyber Crime Stories Shaking India – 25th October

These 10 important cybercrime, cybersecurity, artificial intelligence, financial-fraud and national-security news stories have been compiled by Centre for Police Technology (CPT) in association with Algoritha Security.

1. Five Bank Officials Among Six Arrested in ₹7.36-Crore Cyberfraud Investigation

Category: Critical BFSI Fraud | Insider Risk | KYC Failure | Mule Accounts

Delhi Police have arrested five bank officials and another suspect in an investigation involving suspected mule accounts at CSB Bank branches. The arrests were reported on 24 October 2026.

Investigators identified approximately 20 suspected mule accounts at the bank’s Tri Nagar branch and another 17 at Saraswati Vihar. The accounts were linked to more than 100 complaints on the National Cyber Crime Reporting Portal, with approximately ₹7.36 crore in associated transactions.

Police allege that labourers’ identity documents were obtained through false promises of loans and subsequently used to open accounts with the assistance of bank employees. Investigators identified irregularities involving customer addresses, photographs and KYC documentation.

Electronic devices, Aadhaar and PAN documents, SIM cards, cheque books and other materials were seized. The alleged involvement of bank employees remains subject to investigation and judicial determination.

Why it matters: The investigation highlights the potentially serious consequences of insider collusion, compromised onboarding procedures and inadequate verification of account holders.

Critical BFSI controls: Employee Integrity → KYC Verification → Mule-Account Detection → Maker-Checker Controls → Transaction Monitoring → Forensic Audit.

2. Surat Police Arrest Two Suspects Linked to 338 Complaints Involving ₹410 Crore

Category: Organised Cybercrime | Cryptocurrency | Money Laundering | Financial Intelligence

Surat Police arrested two suspects on 24 October 2026 in connection with an alleged cyberfraud network linked to operators in Dubai and China. The development was reported on 25 October.

The investigation originated from a ₹23.28-lakh fraudulent investment complaint. Police subsequently identified connections between the suspected network’s accounts and 338 cybercrime complaints involving approximately ₹410 crore in reported fraud.

Investigators found multiple current and savings accounts allegedly used to receive and distribute criminal proceeds. Seized materials included mobile phones, debit cards, banking records and account information.

Police allege that the network converted fraud proceeds into USDT cryptocurrency before transferring funds to overseas operators.

Important distinction: The ₹410-crore figure represents the reported value of complaints linked to the investigated accounts. It is not a judicially established amount stolen by the two arrested individuals.

Why it matters: The case illustrates the convergence of mule-account networks, cryptocurrency conversion, international facilitators and social-media investment fraud.

Investigation priorities: Bank-Account Mapping → USDT Transaction Tracing → Device Forensics → Beneficiary Identification → International Cooperation → Asset Recovery.

3. ED Provisionally Attaches ₹3.72 Crore in International Cyberfraud Case Targeting British Senior Citizens

Category: PMLA | International Financial Crime | Digital Forensics | Asset Recovery

The Enforcement Directorate has provisionally attached properties worth approximately ₹3.72 crore in an international cyberfraud investigation, according to reporting published on 25 October 2026.

Investigators allege that the network operated fraudulent call centres in Gorakhpur and Ranchi. Employees allegedly impersonated representatives of a British telecommunications service provider and targeted elderly UK residents.

Victims were reportedly persuaded to install remote-access software under the pretext of improving internet connectivity. The alleged criminals then obtained sensitive information and impersonated UK Action Fraud officials to demand money.

The ED estimates proceeds of crime associated with the principal accused at approximately ₹7 crore. The attached assets reportedly include immovable properties, bank balances and insurance policies. Investigators also reported that funds were routed through international money-transfer services involving India, Bangladesh and Thailand.

Important distinction: The attachment is provisional and remains subject to the applicable legal process.

Why it matters: The investigation demonstrates the importance of combining international cybercrime intelligence, digital evidence and financial asset tracing.

DFIR priorities: Remote-Access Software Analysis → Call Records → Financial Transactions → Cross-Border Evidence → PMLA Investigation → Asset Tracing.

FCRF’s Chief AI Officer Certification Returns on November 14 to Prepare Future AI Leaders

4. C-DAC and Bank of India Partner on Quantum-Safe Banking and AI Fraud Analytics

Category: Government Technology Initiative | BFSI Cybersecurity | Quantum Security | Artificial Intelligence

The Centre for Development of Advanced Computing (C-DAC) and Bank of India have signed a memorandum of understanding to develop and evaluate emerging technologies for banking. The agreement was signed on 22 October and officially announced on 23 October 2026.

The collaboration will explore quantum technologies, high-performance computing, artificial intelligence, blockchain and cybersecurity. A central objective is to establish a Quantum Ecosystem for Financial Innovation.

Potential applications include quantum-safe security, fraud analytics, credit-risk analysis, secure data sharing, digital identity, intelligent document processing and responsible AI. The organisations plan joint research, proof-of-concept demonstrations, pilot projects and technical training.

Important distinction: This is a research and technology-development partnership, not an announcement that quantum-secured banking systems have already been deployed.

Why it matters: Quantum computing presents both long-term opportunities and security challenges for financial institutions, particularly in cryptography, data protection and complex financial analysis.

BFSI priorities: Quantum-Safe Cryptography → AI Fraud Analytics → Secure Data Sharing → Cryptographic Inventory → Technology Research → Workforce Training.

5. Uttar Pradesh Announces Quantum Forensics Centre and Expansion of Scientific Investigation Infrastructure

Category: Police Technology | Digital Forensics | Artificial Intelligence | Legal Compliance

The Uttar Pradesh government announced developments in forensic science and emerging police technology at TechSangam 2026 in Lucknow on 24 October. Chief Minister Yogi Adityanath inaugurated the LEXQ Centre of Excellence, intended to work on quantum forensics and legal compliance.

The state also launched a Consent Management Portal and announced further technology-development initiatives. According to the Chief Minister, Uttar Pradesh is developing forensic laboratories across all 18 police ranges. Twelve laboratories have reportedly been completed, while six are in the final stages. More than 150 forensic vans have also been deployed.

DGP Rajeev Krishna emphasised the growing role of AI, digital forensics, scientific evidence and technology-enabled investigations. He also highlighted the need for stronger verification capabilities to address deepfakes and manipulated digital content.

Important distinction: The inauguration of a centre does not, by itself, establish that all proposed quantum-forensic applications are operationally validated or court-tested.

Why it matters: Scientific investigation infrastructure can improve evidence collection, investigative efficiency and the reliability of criminal prosecutions.

Policing priorities: Digital Forensics → AI-Assisted Investigation → Deepfake Detection → Crime-Scene Management → Electronic Evidence → Forensic Quality Assurance.

6. Goa Police Urge Banks to Verify Suspicious High-Value Transfers by Senior Citizens

Category: BFSI Fraud Prevention | Police-Bank Coordination | Victim Protection

Goa Police have asked banks to introduce stronger scrutiny of unusually large transfers by senior citizens to unfamiliar beneficiaries. The development was reported on 25 October 2026.

At a coordination meeting chaired by IGP Keshav Ram Chaurasia, police urged banks to verify suspicious transactions before funds move into potentially fraudulent accounts. The meeting also addressed delays in responding to police requests for financial information and the importance of identifying unusual deposits.

Police reported that cybercriminals had defrauded Goa residents of approximately ₹100 crore during 2026 to date. The initiative particularly targets digital-arrest scams and fraudulent investment schemes affecting elderly customers.

Regulatory qualification: Any additional scrutiny must be implemented consistently with applicable RBI requirements, customer rights and banking procedures. The reported initiative should not be interpreted as a blanket legal prohibition on senior citizens making legitimate transfers.

Why it matters: Banks can play a critical preventive role when suspicious high-value transfers are identified before funds reach criminal accounts.

BFSI priorities: Senior-Citizen Fraud Protection → Beneficiary Verification → Transaction Risk Scoring → Customer Confirmation → Police Coordination.

7. Maharashtra Inducts 282 Former Navy Agniveers Into Coastal Police

Category: National Security | Maritime Policing | Police Capacity Building

The Maharashtra government has approved the induction of 282 former Indian Navy Agniveers into the state’s coastal police force. The development was announced on 23 October, with further reporting on 24 October.

Chief Minister Devendra Fadnavis said the appointments were intended to strengthen coastal-security operations. The group reportedly includes 150 personnel trained in deck operations and 132 in engine operations.

The government amended recruitment rules to allow eligible former Agniveers to join without repeating standard recruitment examinations. The personnel are expected to support maritime patrols and coastal-security operations. The state has also announced recruitment opportunities for former Agniveers from the Army and Air Force.

Why it matters: Maritime policing requires specialised knowledge of navigation, vessel operations, surveillance and security procedures. Integrating trained naval personnel can strengthen coastal preparedness.

National-security priorities: Coastal Surveillance → Maritime Intelligence → Patrol Operations → Interagency Coordination → Port Security → Counter-Smuggling.

8. NCERT Develops AI Education Module Covering Deepfakes, Misinformation and Data Privacy

Category: AI Education | Digital Safety | Emerging Technology | Cyber Awareness

The National Council of Educational Research and Training (NCERT) has developed an introductory module on computational thinking and artificial intelligence for students in Classes 9–12, according to reporting published on 24 October 2026.

The module aligns with the National Education Policy 2020 and introduces students to AI concepts, practical applications, limitations and responsible technology use. Topics include data privacy, misinformation, fairness, digital safety and the critical evaluation of AI-generated information.

The programme uses activity-based learning to help students understand how AI systems work and how their outputs should be assessed.

Important distinction: Development of the module does not establish that it has already been implemented uniformly across every Indian school.

Why it matters: AI literacy and digital-safety education can strengthen long-term resilience against misinformation, synthetic media and technology-enabled deception.

Cyber-awareness priorities: AI Literacy → Misinformation Detection → Data Privacy → Digital Citizenship → Responsible AI → Critical Thinking.

9. China’s Moonshot Restricts Cyber-Offensive Capabilities of New Kimi AI Model

Category: Emerging AI Security | Cyber Risk | AI Governance

Chinese AI developer Moonshot AI announced on 24 October 2026 that it had reduced the offensive cybersecurity capabilities of its new Kimi K3.1 Pro model. The company plans to release the model’s open weights by 4 November 2026.

Moonshot said it removed certain cybersecurity-related training material and modified reinforcement-learning environments to reduce the model’s ability to discover and exploit software vulnerabilities.

According to company testing, the modified model achieved an 81% score on a controlled cyber benchmark, compared with 90.5% for a comparable version without the restrictions. The company said it sought to preserve legitimate coding capabilities while reducing potential misuse.

Important qualification: The benchmark results are company-reported and have not been independently verified. The modified model may still retain substantial cybersecurity capabilities.

Why it matters: Advanced AI models can potentially accelerate vulnerability discovery and cyberattacks. Their release creates difficult questions about security safeguards, openness and misuse prevention.

AI governance priorities: Model Risk Assessment → Cyber Capability Evaluation → Red Teaming → Controlled Release → Independent AI-Security Testing.

10. Russia-Linked Hackers Used Decentralised Network in Destructive Attack on Ukrainian Logistics Company

Category: Advanced Persistent Threat | Cyber Warfare | Digital Forensics | Critical Infrastructure

Cybersecurity researchers at ESET disclosed on 22 October 2026 that Russia-linked hackers used a decentralised communications network during an intrusion targeting a Ukrainian grain-logistics company. The attack occurred in July 2025, but the technical findings were published during the current reporting period.

Researchers identified the use of Yggdrasil, a volunteer-operated mesh network, to conceal communications with compromised systems. The attackers initially gained access through phishing and deployed remote-access software.

Investigators found evidence of document theft, screenshots, administrator-level access and subsequent data destruction. The attackers reportedly used SDelete, a legitimate file-erasure utility, to destroy data.

ESET attributed the initial intrusion to UAC-0099 and assessed that the destructive phase resembled operations associated with Sandworm.

Important qualification: ESET could not conclusively establish which group operated every stage of the intrusion or whether the attack disrupted grain-export operations.

Why it matters: State-linked cyber operations increasingly combine phishing, concealed communications, legitimate administrative tools and destructive techniques.

DFIR priorities: Phishing Analysis → Remote-Access Detection → Decentralised C2 Monitoring → Privileged-Access Investigation → Data-Wiping Detection → Threat Attribution.

TODAY’S STRATEGIC INTELLIGENCE ASSESSMENT

25 October 2026

Today’s developments reveal three important strategic priorities for Indian financial institutions, law-enforcement agencies and cybersecurity professionals.

1. Insider-assisted financial crime requires stronger institutional controls

The Delhi banking investigation and Surat cyberfraud network demonstrate how criminal activity can exploit weak account-opening procedures, employee access, identity documents and mule-account infrastructure.

Strategic implication: Banks need stronger employee-integrity controls, KYC validation, transaction intelligence, mule-account detection and independent fraud investigations.

2. Technology-enabled policing is becoming increasingly specialised

Uttar Pradesh’s announced forensic capabilities, Goa’s preventive banking measures and Maharashtra’s coastal-police expansion reflect different approaches to strengthening law enforcement.

Strategic implication: Police forces should combine technical expertise, scientific evidence, specialist personnel and coordinated operational procedures to improve investigations and protect potential victims.

3. AI and advanced cyber threats demand proactive security governance

The C-DAC–Bank of India partnership demonstrates growing investment in emerging financial technologies. International developments involving AI-model restrictions and decentralised cyberattack infrastructure reinforce the need for stronger AI security, threat hunting, cryptographic resilience and digital-forensic preparedness.

Strategic implication: Financial institutions and security agencies should assess emerging technology risks before deployment, strengthen independent security testing and build capabilities to investigate increasingly complex cyber incidents.

PRIORITY ACTIONS FOR INDIAN POLICE, LEAs, BFSI AND CYBERSECURITY PROFESSIONALS

Priority	Recommended action
1. Banking fraud controls	Audit account-opening procedures, employee involvement, KYC controls and suspicious-transaction monitoring.
2. Mule-account intelligence	Correlate NCRP complaints, beneficiary accounts, devices, identity documents and cryptocurrency transactions.
3. Financial investigations	Strengthen forensic accounting, proceeds-of-crime tracing and legally defensible asset-recovery processes.
4. Quantum and AI readiness	Assess quantum-safe cryptography, AI fraud analytics and emerging technology risks.
5. Digital forensics	Strengthen remote-access investigations, electronic-evidence preservation and malware analysis.
6. Cybercrime prevention	Improve suspicious high-value transaction verification, rapid bank-police coordination and senior-citizen protection.
7. National security	Strengthen maritime policing, coastal surveillance, intelligence sharing and specialised security-force training.
8. AI cybersecurity	Evaluate AI-model capabilities, misuse risks, agent permissions and independent security controls.

TODAY’S KEY TAKEAWAY

India’s cybercrime and cybersecurity challenges increasingly require integrated financial intelligence, institutional accountability, scientific investigation, AI governance and specialised national-security capabilities.

The immediate priority is to strengthen insider-fraud detection, mule-account disruption, digital-forensic readiness, preventive banking controls and intelligence-led policing.

Compiled by: Centre for Police Technology (CPT) in association with Algoritha Security.