India orders Google to block 57 Firebase sites used in phishing attacks

The Indian central government has officially instructed Google to remove 57 Firebase sites used to facilitate targeted phishing attacks against bank customers. The Indian Cyber Crime Coordination Centre (I4C) identified these databases and web presences as infrastructure for fraudulent activities that mimic prominent financial institutions.

According to authorities, the compromised Firebase pages were specifically designed to impersonate major banks, including the State Bank of India (SBI), ICICI Bank, and Axis Bank. Attackers used these sites to steal sensitive user data by luring victims with fake reward points or fraudulent credit card limit increases. Additionally, a fake application mimicking the state-run PM-KISAN program was identified as a tool for data theft and malware distribution.

These enforcement actions come amid a significant rise in cybercrime in India. Reports indicate that Indian users lost 22,500 crore rupees to digital fraud in 2025 alone, with cumulative losses reaching 52,000 crore rupees over a five-year period.