A look at how India has become a “hack-for-hire” hub, as the growing, dark, and shady industry targets politicians, companies, and activists
- Politicians, companies and activists are increasingly being targeted by a secretive industry. How does it work? Tweets: @dillidurast and @razhael Tweets: Shivam Vij / @dillidurast : “Politicians, companies and activists are increasingly being targeted by a secretive industry. How does it work?... an exposé by the Canadian internet security watchdog, Citizen Lab, outed a Delhi-based firm called Belltrox Infotech last month.” https://www.livemint.com/... Raphael Satter / @razhael : “How India became a hack-for-hire hub” @undertecher dives into the murky market in Indian cybermercenary services — and finds that many of those offering their services are driven by a lack of legitimate outlets for their work. https://www.livemint.com/...
Context & Ripple Effects
This piece sits early in a reporting arc that has since widened considerably. The trigger was Citizen Lab's exposé outing Delhi-based Belltrox Infotech, which turned a niche security finding into a mainstream story about India's cybermercenary market.
Follow-up investigations have since mapped the industry's scale and posture: one traced a scheme running since 2013 that targeted more than 100 US and European organizations through legal cases (an Indian hacking-for-hire operation aimed at litigation documents), another documented global corporate intelligence clients hiring Indian firms against businesses, journalists, and politicians (the corporate-intelligence client pipeline), and recent long-form reporting describes firms so entrenched they publicly tout their services under a tacit alliance with the government (the industry's brazen, government-tolerant posture). What looked in 2020 like one exposed shop is now an established sector.
First-order effects
- Named targets — politicians, companies, and activists — now operate knowing their email and documents can be compromised by a commercial vendor for hire, not just by state actors or opportunistic criminals.
Second-order effects
- Corporate intelligence firms that quietly subcontract Indian hacking shops face reputational and legal exposure as investigators keep naming the supply chain, pushing due-diligence requirements down to the mercenary tier.
Third-order effects
- If the reported tacit government alliance holds, enforcement stays effectively absent and the sector's shift from covert to openly advertised services becomes structural — a domestic cybermercenary industry normalized rather than prosecuted.
The trend: India's hack-for-hire trade is consolidating from deniable subcontracting into a brazen, publicly marketed industry whose growth tracks official tolerance of it.