← Back to feed
Threat Actors & CampaignsEmerging1 sourceJul 9, 2026 · 12:55via SentinelLabs

One Target, Two Flags | Rival Espionage Actors Converge On Pakistani Law Enforcement

Brief

Executive Summary

  • SentinelLABS has been tracking sustained cyberespionage activity against several Pakistani law enforcement organizations, taking place from February 2024 to April 2026.
  • All these actors converged on Balochistan Police over this period, bringing both a partner and an adversary of Pakistan to the same police force in a province shaped by a separatist insurgency and the regional tensions it has drawn in.
  • At Balochistan Police, the compromised assets included servers hosting web applications that manage police and citizen data, such as criminal and biometric records.
  • A suspected China-nexus actor planted implants in one of the web applications, which serves both police staff and citizens, weaponizing a tool of Pakistan’s police digitalization against its users.
Read more on SentinelLabs