What the cyber attacks on Kudankulam and Isro show | Analysis

On September 3, I notified the National Cyber Security Coordinator about network intrusions into the Kudankulam Nuclear Power Plant (KKNPP) and Indian Space Research Organisation (ISRO), after being tipped off by a third-party. It was right around the time of Chandrayaan-2’s final descent.

I made a responsible disclosure on social media on October 28, after the technical indicators of the attack started trickling into the cybersecurity community at-large. It seemed that the infection was still prevalent, nearly two months after the notification.

I did, however, post a cryptic tweet on September 7, which hinted at a “casus belli” – an act of war – in Indian cyberspace.