Pakistan cyber threats: spyware ads, espionage and ransomware
Five overlapping risks range from a narrow espionage campaign against nuclear-linked bodies to mass theft of government portal logins, with uneven real-world impact.
ThreatMon counted roughly 760,000 Pakistan-linked logins in 2026, with 57.6% tied to .gov.pk domains.
The logins came mostly from infected personal devices, not direct breaches of government systems.
Pakistan logged roughly 139 million malicious ad bids from March to June 2026, a count that does not confirm infections.
ThreatMon counted seven ransomware cases involving Pakistani victims in 2026, three of them in healthcare.
National CERT has about 70 staff and uses AI for roughly 30% of its monitoring work.