India faces 505 cyber threats per minute as credential theft spikes, report says

A Quick Heal Seqrite Threat Report covering October 2024 to September 2025 recorded 265.52 million detections across more than 8 million Indian endpoints – an average of 505 threats per minute. Trojans accounted for about 43% of incidents and file infectors 35%, mainly delivered via phishing attachments, compromised websites and pirated software. Cryptojacking reached roughly 6.5 million detections, while ransomware made up less than 1% of cases but caused over 113,000 detections during a January‑2025 spike.

Education, healthcare and manufacturing sectors together represented nearly 47% of the total detections. At the regional level, Maharashtra logged the highest number of incidents (over 36 million), followed by Gujarat and Delhi. The report warns that AI‑assisted, automated attacks are set to evolve into “cognitive intrusions” in 2026.

A second release highlighted a surge in credential theft targeting Indian IT firms. Stolen login details are being traded on dark‑web markets and used for lateral movement, privilege escalation and data exfiltration. The report advises an identity‑first security stance, including zero‑trust architectures and mandatory multi‑factor authentication, to mitigate compliance risks under India’s Digital Personal Data Protection Act, 2023.