According to a recently published Zscaler ThreatLabz 2024 Mobile IoT and OT Threat report, India has emerged as the most targeted country for mobile malware attacks. The Report, published by the cloud security company Zscaler Inc. on 3rd December 2024, analysed security attacks by hackers on mobile and IoT/OT from June 2023 to May 2024.

Malware, or malicious software, is a type of programme or file that steals data and damages or destroys the computer and its system. Cybercriminals or hackers use malware. Common types of malware are computer viruses, worms, spyware, Trojan horses, and ransomware.

Main Points of the Zscaler ThreatLabz 2024 Report

28 % of the attacks on mobile phones in the world were reported from India.
After India, the United States was second, followed by Canada, South Africa, and the Netherlands.
In the 2023 report, India was ranked third in the world after the United States and Canada.
The United States remains the top target of Internet of Things (IoT) device attacks, followed by Singapore, the United Kingdom, Germany, and Canada.
Within the Asia Pacific region, India accounted for 66.5% of mobile malware attacks.
Within the Asia Pacific region, India was ranked seventh as the origin of the malware. Last year, it was ranked fifth.
The major source of the origin of the malware in the Asia Pacific region was Singapore, followed by China and South Korea.

Cyber security Law in India

The Information Technology (IT) Act of 2000 is the main law governing cybersecurity, data protection, and cybercrime.

Its main features are:

It grants statutory recognition and protection to electronic transactions and communications;
Safeguard electronic data, information and records;
Aim to prevent unauthorised or unlawful use of computer systems; and
Make activities such as hacking, denial-of-service attacks, phishing, malware attacks, identity fraud and electronic theft are punishable offences.

Indian Computer Emergency Response Team (CERT-In)

The Indian Computer Emergency Response Team (CERT-In) was established in January 2004 under the Union Ministry of Electronics and Information Technology.

The Information Technology Amendment Act 2008 makes CERT-In the national nodal agency for responding to computer security incidents in the country.
It is responsible for collecting, analysing and disseminating information on cybersecurity incidents and taking emergency response measures.