Series of incidents

In most of these cases, the targets were government officials who were part of internal email groups. Some of these groups included those for top level officers

In the latest attacks, targets were lured into clicking a spoofed link that led to a fake email login page. Entering user credentials would pass the ID and passwords on to the attackers The mails have prompted the government’s IT departments to issue repeated alerts to government officials, asking them to immediately change their passwords

NIC officials said user-awareness is crucial to avoid such cases, but experts also questioned if the agency deploys adequate checks