India Faces 5.2 Billion Encrypted Cyberattacks, Ranks Second Globally

India has emerged as the second-most targeted nation globally for encrypted cyberattacks, according to the Zscaler ThreatLabz 2024 Encrypted Attacks Report. The country witnessed 5.2 billion encrypted attacks between October 2023 and September 2024, trailing only the U.S., which saw 11 billion attacks. Other affected nations, such as France (854 million), the UK (741 million), and Australia (672 million), recorded significantly lower numbers.

The report highlights a 10% year-over-year increase in threats delivered over encrypted channels, with 87% of all cyberattacks now leveraging encryption. This trend underscores a growing challenge for cybersecurity teams, particularly as threat actors increasingly exploit encrypted traffic to deploy advanced malware and evade detection.

India’s Threat Landscape

Malware accounted for 86% of encrypted threats globally, with India observing nearly 97% of its encrypted attacks stemming from malware, phishing, and ad spyware. Popular malware families included AsyncRAT, Choziosi Loader, and Agent Tesla, among others. However, phishing attacks and cryptomining incidents in India saw modest declines of 3.8% and 8.67%, respectively.

India’s manufacturing sector experienced a staggering 170.88% rise in encrypted attacks, attributed to rapid Industry 4.0 adoption and the proliferation of interconnected systems. Technology and communication followed closely, accounting for 32.6% of encrypted threats, with finance, insurance, and retail also among the heavily impacted industries.

“India’s ranking in encrypted threats highlights the growing complexity of the cyber landscape,” said Suvabrata Sinha, CISO-in-Residence, Zscaler India. “To safeguard digital assets, organizations must adopt robust security measures, including a Zero Trust approach to traffic inspection, and prioritize cybersecurity awareness.”

Encrypted Threats and AI’s Role

The report noted a 19% increase in encrypted malware incidents globally, reflecting attackers’ ability to conceal malicious payloads within encrypted channels. ThreatLabz researchers linked the growing sophistication of these attacks to the rise of generative AI, which enables cybercriminals to refine their tactics. The report also recorded significant spikes in web-based threats, including a 79.39% increase in cross-site scripting and a 172.81% rise in browser exploit attacks.

The Zero Trust Approach

To combat the surge in encrypted threats, Zscaler recommends a Zero Trust architecture, which emphasizes inspecting all encrypted traffic, securing connectivity across users, devices, and applications, and isolating unknown attacks using AI-driven cloud sandboxes.

Key steps to mitigate encrypted threats include:

• Inspecting both incoming and outgoing encrypted traffic to detect and block threats.
• Implementing microsegmentation to restrict access even for authenticated users.
• Using AI-driven security tools to neutralize threats before they impact systems.
• Reducing attack surfaces by limiting entry points and employing robust access controls.

The Zscaler Zero Trust Exchange™ platform offers layered security controls to prevent advanced attacks, safeguarding organizations across all stages of the cyber kill chain.

As India continues its digital transformation, this report serves as a call to action for businesses to strengthen their defenses against encrypted cyberattacks and build a resilient cybersecurity posture.