Growing Cyber Risks in the Subcontinent

India currently ranks as the seventh most targeted country globally for cyber threats and stands as the third most targeted nation across Asia, according to recent telemetry and intelligence data released by Microsoft.

Speaking at a prominent global policy summit in New Delhi, Nicholas Butts, Director of Global AI and Cybersecurity Policy at Microsoft, underscored that the cyber security landscape facing the nation requires immediate and robust defensive measures rather than long-term theoretical planning.

"What we're seeing is not about potential doom and gloom in 10 years, but about very real security threats right here today," Butts stated, employing a "leaky roof" analogy to emphasize the urgency of plugging digital vulnerabilities.

Scale of Global Telemetry

Detailing the sheer volume of digital traffic monitored by the tech giant, Butts noted that the corporation processes approximately 165 trillion telemetry signals daily. The automated infrastructure screens roughly 5 billion emails every day and successfully blocks around 5 million newly generated malware files on a daily basis.

"We have quite a unique vantage point on some of this," Butts told attendees, reinforcing that the scale of attacks targeting critical infrastructure and commercial enterprises globally—and in India specifically—is unprecedented.

Emerging Threat Vectors and State Actors

Highlighting specific threat groups tracked by Microsoft's intelligence teams, Butts pointed to sophisticated campaigns orchestrated by both criminal syndicates and nation-state actors.

- Storm 3168 (Jadepuffer): A China-based ransomware organization actively deploying AI agents to execute automated ransomware attacks against commercial clients globally. - Storm 0940: A recently exposed Chinese state-sponsored espionage group focused primarily on large-scale data theft and intelligence gathering. - EvilTokens: An autonomous criminal infrastructure developed by independent operators utilizing open-source and closed-source AI models to provide subscription-based cyber exploitation tools, impacting more than 10,000 organizations across 120 countries.

Security analysts emphasize that the democratization of artificial intelligence has significantly lowered the technical barrier to entry for cybercriminals, enabling bad actors to scale operations rapidly and bypass traditional perimeter defenses.