Pakistan’s telecom regulator detected 326 cyber threat indicators through dark web monitoring between July 2025 and June 2026, according to its Cyber Security Annual Report 2025-26, with website defacement emerging as the most common threat.
What happened?
The Pakistan Telecommunication Authority’s National Telecommunications Security Operations Centre (nTSOC) monitors dark web forums, illegal online marketplaces, commercial threat intelligence platforms and open-source channels to identify compromised websites, leaked data and malicious activity. Its annual report for 2025-26 summarises what that monitoring found over the twelve months to June 2026.
Key details
- 326 cyber threat indicators detected through dark web monitoring from July 2025 to June 2026.
- Website defacement was the largest category, with 174 cases, or 53 percent of the total.
- Data leaks accounted for 87 cases, or 27 percent of the total.
- Distributed denial-of-service (DDoS) threats accounted for 41 cases, or 13 percent.
- The remaining 24 cases involved the advertisement or sale of sensitive information on dark web forums and illegal online marketplaces.
- The report warns that leaked information, including compromised login credentials and organisational data, could expose individuals and businesses to further cyberattacks.
- The report also flags data theft and location-tracking risks in 5G networks.
- Blocking activity spiked in September 2025, when sharply more URLs and social media accounts were flagged for blocking, before declining in subsequent months; social media accounts recorded higher blocking figures than URLs and applications during much of the year.
What it means for people in Pakistan
For ordinary internet users, the findings are a reminder to use strong, unique passwords and turn on two-factor authentication wherever it is offered, since leaked credentials are one of the main ways attackers break into accounts. For businesses and organisations running websites, the dominance of defacement cases shows why keeping software updated and monitoring sites for unauthorised changes matters. The regulator says continuous monitoring helps identify emerging risks, investigate compromised digital assets and protect the country’s telecommunications networks and critical information infrastructure.
Source: https://bloompakistan.com/pta-reports-326-cyber-threats-including-87-data-leaks-in-one-year/
