ISLAMABAD: The Pakistan Telecommunication Authority (PTA) identified 326 significant Cyber Threats indicators through dark web monitoring during 2025-26.

The findings were revealed in the authority’s Cyber Security Annual Report 2025-26.

The report covered cybersecurity monitoring activities conducted between July 2025 and June 2026.

According to PTA, website defacement emerged as the most frequently detected cybersecurity threat during this period.

Data leaks, Distributed Denial of Service (DDoS) attacks and illegal data trading were also identified as major concerns.

The findings highlight ongoing risks to Pakistan’s digital systems, online services and telecommunications infrastructure.

Website Defacement Accounts for 53% of Cyber Threats

According to the report, website defacement accounted for 174 of the 326 identified threat indicators.

This represented approximately 53 percent of all detected indicators during the reporting period.

Website defacement occurs when attackers gain unauthorized access to websites and change their content or appearance.

Such incidents can affect organizational credibility and indicate weaknesses in website security.

Data leaks were the second most common threat category, with 87 indicators recorded.

These accounted for approximately 27 percent of the total findings.

The report highlighted concerns about exposed credentials, compromised information and sensitive organizational data.

Such information could potentially be misused by cybercriminals for unauthorized activities.

DDoS Attacks and Illegal Data Trading Raise Concerns

PTA also identified 41 indicators linked to Distributed Denial of Service attacks.

These represented approximately 13 percent of the total detected indicators.

DDoS attacks can disrupt websites and online services by overwhelming systems with excessive traffic.

Such attacks may affect the availability of digital platforms and internet-based services.

Meanwhile, another 24 indicators involved sensitive information being advertised or offered for sale.

These accounted for approximately seven percent of the total findings.

The information appeared on dark web forums and illegal online marketplaces.

These findings highlighted risks associated with the unauthorized distribution of confidential information.

PTA Strengthens Dark Web Monitoring Operations

The Pakistan Telecommunication Authority conducted monitoring through its National Telecom Security Operations Centre (nTSOC).

The centre continuously monitored dark web forums, underground cybercrime networks and illegal digital marketplaces.

Its monitoring activities focused on identifying compromised digital assets, leaked information and emerging security risks.

Officials analyzed collected intelligence to assess possible threats to organizations and telecommunications systems.

The findings were then reviewed to identify cases requiring further investigation or preventive action.

According to PTA, continuous monitoring helped improve the early identification of potential cybersecurity incidents.

The authority said these activities also strengthened the country’s overall cybersecurity preparedness.

Cybersecurity Intelligence Shared With Relevant Authorities

PTA shared actionable cybersecurity intelligence with telecommunications operators and other relevant organizations.

The information was also provided to the National Computer Emergency Response Team (National CERT).

The intelligence aimed to help relevant stakeholders identify vulnerabilities and take preventive measures.

Telecommunications licensees were encouraged to strengthen security arrangements and improve risk management procedures.

The authority also emphasized the importance of protecting critical telecommunications infrastructure.

Effective coordination between relevant organizations remains important for addressing emerging digital security challenges.

Pakistan Focuses on Stronger Cybersecurity Protection

The annual report highlighted the importance of continuous monitoring as cybercriminal activities evolve.

PTA said its monitoring operations supported early detection and improved awareness of potential digital security risks.

The authority also focused on strengthening coordination with organizations responsible for protecting digital infrastructure.

The findings showed that website defacement and data leaks remained major cybersecurity concerns during 2025-26.

However, the reported figures represent detected threat indicators rather than a confirmed count of successful cyberattacks.

PTA maintained that sharing timely intelligence could help organizations respond more effectively to emerging risks.

The authority said continued monitoring and preventive measures would support Pakistan’s telecommunications security.

In other news read more about NCCIA Receives Over 10,000 Cybercrime Complaints in 53 Days

These efforts aim to improve the country’s ability to identify and respond to evolving Cyber Threats.