Insider attack; User accounts compromised

"The attack took place despite an alert issued four days earlier, on July 8, by the National Critical Information Infrastructure Protection Centre (NCIIPC), formed under the National Technical Research Organisation (NTRO), as the malware or malicious software used was “sophisticated” and targeted subjects, individuals and organisations.” Perpetrated by nation states "inimical to India’s interests”