Influence Operations and Conflict Escalation in South Asia

Insikt Group documents two large-scale, state-aligned influence operation networks—Hidden Charkha (pro-India) and Khyber Defender (pro-Pakistan)—active throughout the April–May 2025 India–Pakistan crisis, detailing their objectives, assets, and TTPs (coordinated inauthentic behavior, AI-generated media, impersonation of news outlets, hashtag amplification), as well as their narrative playbooks across attribution, political pressure, diplomatic signaling, kinetic and cyber escalation, and ceasefire aftermath. The report attributes Khyber Defender to Pakistan’s Team 64, highlights both networks’ attempts to project technological/military superiority and undermine adversaries (including via forged documents and exaggerated cyberattack claims), assesses minimal real-world impact due to low organic engagement and echo chambers, and provides monitoring and mitigation recommendations for organizations, media, and governments.