Technology · India Bureau
Ahmedabad bomb threats linked to hacked email accounts, cross-border probe underway
Investigators probing a series of bomb threats in Ahmedabad have identified a suspected network trafficking in compromised Gmail accounts. Digital forensics indicate the hacked credentials were accessed from Bangladesh and Pakistan.
LSN India ·
The investigation into bomb threats received by multiple locations across Ahmedabad has shifted focus to a coordinated network of cyber criminals allegedly selling stolen email credentials, officials said on Monday. Forensic analysis of the threatening messages has revealed that compromised Gmail accounts were used to carry out the intimidation campaign, with access logs suggesting involvement from multiple countries in South Asia.
Detectives tracking the digital footprints have identified suspicious login patterns originating from both Bangladesh and Pakistan, according to investigators familiar with the probe. The findings suggest a sophisticated operation wherein hacked accounts were sold on underground forums and subsequently deployed for carrying out threats against targets in India.
Authorities are focusing on identifying the extent of the credential-selling network and tracing the supply chain of compromised accounts. Cyber forensics teams are examining email metadata, IP addresses, and login timestamps to establish the precise geographic locations from which the threatening messages were dispatched.
The investigation has expanded to include coordination with state police cyber wings and central agencies. Officials cautioned that the cross-border nature of the operation presents significant challenges in apprehending those responsible, and further inquiries are ongoing to establish the identities of individuals behind the threat campaign.