AnonSec member arrested by the Indian Anti-Terrorism Squad

Recently, on 20^th May 2025, the Gujarat Anti-Terrorism Squad (ATS) arrested an AnonSec member named Jasim Shahnawaz Ansari, an 18-year-old from Nadiad, Gujarat, for his alleged involvement in cyberterrorism activities.

Ansari, along with a group of juveniles, reportedly carried out over 50 cyberattacks on Indian government websites between April and May 2025. These attacks targeted sectors such as defence, finance, aviation, urban development, and various state departments.

Investigations revealed that Ansari and his associates operated a Telegram group named “AnonSec”, where they coordinated distributed denial-of-service (DDoS) attacks designed to crash websites by overwhelming them with traffic.

The group also posted anti-India messages following successful attacks. Authorities are investigating potential foreign influence in these activities.

According to our researchers, the attacker was not part of a deep-state group or international APT—he was a Class 12 student armed with a smartphone, a Telegram channel, and an internet connection.

Profiling the Mind Behind AnonSec

• Name: Jasim Shahnawaz Ansari
• Age: 18
• Location: Nadiad, Gujarat
• Education: High school (Class 12)
• Motivation: Claimed to be driven by ideological reasons; sympathised with foreign narratives

Jasim’s transformation from an ordinary student to a cyber threat actor demonstrates the dark side of unregulated digital exposure and a lack of early intervention in cybersecurity awareness.

These attacks coincided with military operations, revealing a potential intent to disrupt national security infrastructure during critical times.

 

Analysing AnonSec historical activity

 

The iZOOlogic Threat Intelligence team analysed historical activity logs associated with AnonSec. Key observations include:

• Recurrent Targeting: Indian defence, transport, and civic websites were repeatedly hit, some multiple times. (Over 50 incidents recorded by the iZOOlogic Team)
• Attack Type: Predominantly DDoS—designed for disruption over data theft.
• Coordination: Operated via Telegram groups with shared tools and pasted scripts, mirroring “Anonymous”-style operations.
• Global Alliance: Global alliance with other hackers/hacktivist groups targeting India, UAE, Israel, Ukraine, UK and USA. (Overall, 150 incidents were recorded by iZOOlogic targeting across various countries and geo-location)
• Ideological Tone: Post-attack defacements and Telegram messages pointed to political and anti-national sentiments.

The activity pattern reveals a low-sophistication, high-impact threat model ideal for replication by others in the absence of stronger preventive infrastructure.

 

Why This Case Is a National Security Concern

 

This incident is more than a teenage misadventure – it is a blueprint for future cyber disruption from within our borders:

1. Weaponisation of Free Knowledge—Platforms like YouTube and GitHub are used to gain offensive cyber skills without checks.
2. Telegram as a Dark Alley– Encrypted platforms now function as command-and-control hubs for hacktivists and radicals.
3. Lack of Awareness & Early Detection– Neither schools, families, nor ISPs picked up early warning signs of online radicalisation or suspicious network behaviour.

Strategic Takeaways for Organisations & Governments

• Implement Real-Time DDoS Detection: Cloud-based mitigation tools and WAFs should be standard across all critical infrastructure portals.
• Monitor Telegram and Dark Web Channels: Intel teams must continuously track underground chatter, especially in regional hacktivist spaces.
• Build Ethical Hacking Communities: Empower young digital talent by giving them legitimate platforms, bug bounties, and mentorships.
• Push for Cyber Literacy in Schools: Like health-ed, cyber-ethics education must begin in high school.

The AnonSec case is not just about one individual. It reflects a generation exposed to global ideologies, powerful tools, and little oversight. Even a teenager can paralyse a nation’s digital arm in the wrong circumstances.

At iZOOlogic, we are committed to identifying, analysing, and helping organisations proactively defend against both internal and external cyber threats. This case is a stark reminder that cybersecurity is no longer a luxury but a necessity.