China, India-Linked Hackers Both Targeted Same Pakistani Police Force

Two separate nation-state threat actors — linked to China and India — simultaneously compromised Pakistani law enforcement networks for over two years, exfiltrating highly sensitive data including biometric databases and criminal case files. The prolonged, undetected nature of the intrusions suggests critical failures in network segmentation, endpoint monitoring, and threat detection capabilities. Tools like PlugX, ShadowPad, and Cobalt Strike are well-documented APT staples, meaning signature-based and behavioral detection should have flagged their presence far sooner. The targeting of biometric data is particularly alarming, as this information cannot be changed once compromised, creating permanent identity and operational security risks for law enforcement personnel. This case demonstrates that government agencies in geopolitically sensitive regions are high-value targets requiring defense-in-depth strategies commensurate with nation-state threat levels.