Canada names India in cyberthreat list, accuses it of 'likely' spying
Ottawa/New Delhi, Nov 2: Amid an ongoing diplomatic row, Canada has for the first time named India in a list of cyberthreat adversaries and suggested state-sponsored actors could be spying against it, an allegation that New Delhi slammed on Saturday terming it to be “another example” of Ottawa's strategy to “attack India.”
India is named fifth after China, Russia, Iran and North Korea in the National Cyber Threat Assessment 2025-2026 (NCTA 2025-2026) report.
“We assess that Indian state-sponsored cyber threat actors likely conduct cyber threat activity against Government of Canada networks for the purpose of espionage,” the report said.
India is also mentioned in the trend on 'Geopolitically inspired non-state actors are creating unpredictability' citing as example how a pro-India hacktivist group claimed to have defaced and conducted brief attack against Canadian websites after India was accused of involvement in the killing of a Canadian citizen.
The NCTA 2025-2026 that highlights the cyber threats facing individuals and organisations in Canada was released on October 30 by the Canadian Centre for Cyber Security (Cyber Centre), which is Canada’s technical authority on cyber security, and part of the Communications Security Establishment Canada (CSE). The assessment reports are released every two years.
While there was no mention of India in the National Cyber Threat Assessment reports of 2018, 2020 and 2023-24, the 2025-26 assessment mentions India – along with China, Russia, Iran and North Korea -- in the 'Cyber threat from state adversaries' section that introduces the state cyber threat ecosystem and discusses the cyber threats to Canada.
“India’s leadership almost certainly aspires to build a modernised cyber programme with domestic cyber capabilities. India very likely uses its cyber programme to advance its national security imperatives, including espionage, counter-terrorism, and the country’s efforts to promote its global status and counter narratives against India and the Indian government,” the assessment report said.
“We assess that India’s cyber programme likely leverages commercial cyber vendors to enhance its operations. We assess that Indian state-sponsored cyber threat actors likely conduct cyber threat activity against Government of Canada networks for the purpose of espionage,” it said further.
“We judge that official bilateral relations between Canada and India will very likely drive Indian state-sponsored cyber threat activity against Canada,” it claimed.
CSE and its partners in Canada and across the Five Eyes are attuned to the cyber threats to Canada from state and nonstate cyber threat actors and are tracking them as they evolve, the report said.
NCTA 2025-2026 provides the Canadian public with CSE’s current insights on the state and non-state cyber threat actors conducting malicious cyber threat activity against Canada and how we assess the cyber threat landscape will evolve in the next two years, it added.
Canada is confronting an expanding and more complex state cyber ecosystem, the report said, and talked about strategic adversaries, emerging cyber programmes and wider cyber ecosystem.
In the 'Emerging cyber programmes,' it said: “At the same time, countries that aspire to become new centres of power within the global system, such as India, are building cyber programmes that present varying levels of threat to Canada.”
“While emerging states focus their cyber efforts on domestic threats and regional rivals, they also use their cyber capabilities to track and surveil activists and dissidents living abroad,” it added.
The NCTA 2025-2026 also mentioned “Geopolitical conflicts and tensions are inspiring disruptive cyber threat activity from non-state groups, commonly referred to as hacktivists” and gave example of how geopolitically motivated hacktivists typically conduct attacks to gain attention, such as distributed denial-of-service (DDoS) attacks, website defacements, and data leaks from Russia and India.
“Diplomatic tensions are also inspiring hacktivist activity. After Canada accused India of involvement in the killing of a Canadian citizen, a pro-India hacktivist group claimed to have defaced and conducted brief DDoS attacks against websites in Canada, including the public-facing website of the Canadian Armed Forces,” the report said.
“This non-state ecosystem is dynamic and unpredictable,” it added.
The development comes as the bilateral relationship has gone south since Prime Minister Justin Trudeau said a year ago that Canada had credible evidence that agents of the Indian government were involved in the murder of Canadian Sikh activist Hardeep Singh Nijjar in British Columbia in June 2023, a charge dismissed as absurd by India.
Meanwhile, the Ministry of External Affairs (MEA) on trashed the report.
MEA spokesperson Randhir Jaiswal told reporters in New Delhi: “Another category, Canada has put India into. This categorisation is as per the cyber report that they have issued. It appears to be another example of a Canadian strategy to attack India.”
“As I mentioned earlier, their senior officials have openly confessed that they are seeking to manipulate global opinion against India, as on other occasions, imputations are made without any evidence,” Jaiswal added.
While rejecting India being bracketed in that category, the MEA spokesperson said the accusation being levelled against India is “absolutely not right.”
India has been maintaining that the main issue between the two countries is that of Canada giving space to pro-Khalistan elements operating from Canadian soil with impunity.
India last month expelled six Canadian diplomats and withdrawn its high commissioner Sanjay Verma and other “targeted” officials from Canada after strongly dismissing Ottawa's charges.
Let the Truth be known. If you read VB and like VB, please be a VB Supporter and Help us deliver the Truth to one and all.
London, Nov 22: A bomb disposal squad deployed as a “precaution” to the South Terminal of Gatwick Airport concluded an investigation into a "security incident" on Friday after making a “suspect package” safe.
The South Terminal of Gatwick Airport, the UK's second busiest airport after Heathrow, which was briefly shut owing to the incident reopened following the incident.
The Gatwick is around 45 km south of London.
Two people detained during the enquiries have since been allowed to continue their journey as the airport was opened.
“Police have concluded their investigation into a report of a suspect package at Gatwick Airport. Officers from the EOD (Explosive Ordnance Disposal) team made the package safe, and the airport has been handed back to its operator,” Sussex Police said in an updated statement.
“Two people detained while enquiries were ongoing have subsequently been allowed to continue their journeys. There will remain an increased police presence in the area to assist with passengers accessing the South Terminal for onward travel,” the statement added.
Earlier on Friday, the incident caused severe disruption at the busy airport’s South Terminal, while the North Terminal of Gatwick Airport remained unaffected.
“Police were called to the South Terminal at Gatwick Airport at 8.20 am on Friday (November 22) following the discovery of a suspected prohibited item in luggage,” a Sussex Police statement said.
“To ensure the safety of the public, staff and other airport users, a security cordon has been put in place whilst the matter is dealt with. As a precaution, an EOD (Explosive Ordnance Disposal) team is being deployed to the airport. This is causing significant disruption and some roads around the South Terminal have been closed. We’d advise the public to avoid the area where possible,” it said.
Footage on social media taken outside the airport showed crowds of frustrated travellers being moved away from the terminal building.
Gatwick said it was working hard to resolve the issue.
“A large part of the South Terminal has been evacuated as a precaution while we continue to investigate a security incident," the airport said in a social media post.
“Passengers will not be able to enter the South Terminal while this is ongoing. The safety and security of our passengers and staff remain our top priority. We are working hard to resolve the issue as quickly as possible.”
Train and bus services that serve the airport were also impacted while the police carried out their inquiries.
In an unrelated incident in south London on Friday morning, the US Embassy area in Nine Elms by the River Thames was the scene of a controlled explosion by Scotland Yard dealing with what they believe may have been a “hoax device”.
“We can confirm the 'loud bang' reported in the area a short time ago was a controlled explosion carried out by officers,” the Metropolitan Police said in a post on X.
“Initial indications are that the item was a hoax device. An investigation will now follow. Some cordons will remain in place for the time being but the majority of the police response will now be stood down,” it added.
