IT Companies Warned About Infrastructure Attacks and Disinformation, Says Nasscom

Indian IT industry body Nasscom has issued a stark warning to technology companies about the growing threats of infrastructure attacks and disinformation campaigns. The organization urged businesses to strengthen their defenses against increasingly sophisticated cyber threats that could potentially disrupt operations and damage reputations.

In a comprehensive advisory circulated to member companies, Nasscom highlighted how the technology landscape has become a prime target for malicious actors seeking to exploit vulnerabilities in critical infrastructure. The warning comes amid a significant rise in cyber incidents targeting India’s burgeoning tech sector, which remains a crucial component of the nation’s economy.

“The nature of threats has evolved dramatically over the past few years,” said a senior Nasscom official who requested anonymity. “We’re no longer just talking about data breaches or ransomware. We’re seeing coordinated attacks on infrastructure coupled with sophisticated disinformation campaigns designed to maximize both operational and reputational damage.”

The advisory specifically pointed to recent incidents where threat actors combined attacks on IT infrastructure with strategically timed disinformation campaigns on social media platforms. This dual approach can magnify the impact of security breaches, creating confusion among stakeholders and potentially hampering response efforts.

India’s IT sector, which contributes approximately 8% to the country’s GDP and employs over 4.5 million professionals directly, has become an increasingly attractive target for cybercriminals and state-sponsored actors alike. The industry’s deep integration with global business operations makes it particularly vulnerable to attacks that could have far-reaching consequences.

Cybersecurity experts suggest that the warning reflects broader global trends. “We’re witnessing a convergence of traditional cyber threats with information warfare tactics,” explained Rahul Sharma, cybersecurity analyst at Digital Fortress Research. “For Indian IT companies that handle sensitive data for clients worldwide, this presents a particularly complex challenge requiring multi-layered defense strategies.”

The advisory recommends several concrete steps for technology companies to bolster their resilience. These include implementing advanced threat detection systems, conducting regular security audits of critical infrastructure, developing crisis communication protocols, and training employees to recognize disinformation tactics.

Nasscom also emphasized the importance of information sharing within the industry. “No single organization can address these threats in isolation,” the advisory stated. “A collaborative approach to threat intelligence is essential for building collective resilience.”

Some industry leaders have already begun implementing enhanced security measures in response to the warning. Tech Mahindra recently announced an increased investment in its cybersecurity division, while Infosys has expanded its security operations center to provide round-the-clock monitoring.

The warning comes at a time when Indian IT companies are navigating complex geopolitical tensions and increasing regulatory requirements around data security. With clients in North America and Europe imposing stricter compliance mandates, Indian firms must demonstrate robust security practices to maintain trust and competitive advantage.

Small and medium-sized tech companies face particular challenges, as they often lack the resources of larger enterprises but remain attractive targets. “Smaller firms need to recognize that they’re not immune,” said Priya Venkatesh, director of a cybersecurity consultancy in Bengaluru. “In fact, they may be seen as soft targets or potential entry points into larger networks.”

Beyond immediate security concerns, industry analysts note that Nasscom’s warning reflects a broader shift in how technology companies must approach risk management. The combination of infrastructure vulnerabilities and information warfare requires a more integrated approach that spans technology, communications, and human resources.

Government officials have also acknowledged the threat, with the Ministry of Electronics and Information Technology working on updated guidelines for critical information infrastructure protection. These efforts align with India’s broader national cybersecurity strategy, which recognizes the strategic importance of the IT sector to national interests.

As the threat landscape continues to evolve, Nasscom has committed to providing regular updates and facilitating industry-wide training programs. The organization plans to establish a dedicated working group focused specifically on countering disinformation campaigns targeting the technology sector.

For an industry that has been a cornerstone of India’s economic growth story, addressing these emerging threats will be crucial to maintaining its global reputation for reliability and security in an increasingly complex digital ecosystem.