Back to threat feeds
Malware
Internal systems of CDSL India compromised after detecting malware
India's largest security depository, CDSL, has confirmed the presence of unidentified malware that compromised several internal systems…
Continue reading
India's largest security depository, CDSL, has confirmed the presence of unidentified malware that compromised several internal systems…
Continue reading
Central Repository Services Limited (CDSL), India's largest central securities depository, reports that some of its internal systems were found to be compromised following the discovery of unidentified malware.
On Friday, the securities depository reported that malware had infected _"a number of its internal systems,"_ according to a filing with the National Stock Exchange of India. In addition to that, _" Based on the preliminary findings, nothing substantiates to believe that any highly classified information or the investor data has been breached."_
As a _" matter of abundant care,"_ the central depository has _"immediately isolated the compromised systems and withdrew itself from other constituents of the capital market,"_ the filing stated.
CDSL does not respond to any of the incoming queries, including whether or not it stores the investors' records in those concerned systems and what are the associated risks of data leaks over the darknet. A representative from CDSL has added, _"We have already dropped an intimation about the incident to the appropriate authorities and are currently working towards resolutions with cybersecurity advisories."_
However, no details on the nature of the malware were disclosed, and the website has been taken offline for the past 12 hours now. The government agency also said that _" resolution of the issue is under progress,"_ after which settlement actions will be finalized.
Meanwhile, the central depository said that the security event had left a negative impact on clearing and settlement operations and that the distribution of funds and securities would eventually be delayed as a result.
There have been previous cyberattacks targeting CDSL; thus, this is not the first time. This depository's subsidiary, CDSL Ventures, was discovered to have kept the sensitive information of 4.39 billion Indian investors in unprotected way in November of last year.
55+ football scam campaigns exploit FIFA World Cup 2026 hype on Meta platforms, pushing fake merchandise, phishing, and IPTV fraud.
