Skip to content

Threat actor

Shoghi Communications

Last fetched

Shoghi Communications is a threat actor tracked in WhisperGraph's MITRE ATT&CK corpus, observed using 0 techniques.

Description

Shoghi, an Indian cyberintelligence firm founded by Harish Gupta, rose to prominence in the late 2000s under the leadership of Anant Bindal, a businessman from a powerful family in India. The company secured a large $200 million contract to supply India's external intelligence agency, the Research and Analysis Wing (R&AW), with advanced interception technologies, including IMSI-catchers and COMINT tools. The company became internationally recognized when it was named in WikiLeaks' "Spy Files" as part of a global surveillance industry catering to governments and intelligence agencies. Bindal later relocated to the UAE, where he founded Stratign, a Dubai-based firm that mirrors Shoghi's model of distributing and integrating interception solutions sourced from other companies.

Techniques by tactic

No ATT&CK techniques are recorded for Shoghi Communications in WhisperGraph.

Attributed infrastructure

None published. WhisperGraph carries no ATTRIBUTED_TO edge to Shoghi Communications today — this states the absence of a published link, not that Shoghi Communications has no infrastructure.

References

© The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation.

Related pages

Pivot from Shoghi Communications into its techniques, tactics and any attributed infrastructure.

Queries

Resolves the slug to this actor, merging every duplicate node sharing the same name.


MATCH (a:ACTOR)
WHERE a.name =~ $pattern OR any(x IN a.aliases WHERE x =~ $pattern)
RETURN a.id AS id, a.name AS name, a.aliases AS aliases, a.description AS description,
       a.references AS references, a.campaigns AS campaigns
LIMIT 25
Run yourself →

Techniques this actor uses, grouped by the tactic each one serves.


MATCH (a:ACTOR {name: $name})-[:USES_TECHNIQUE]->(t:ATTACK_PATTERN)
OPTIONAL MATCH (t)-[:USES_TACTIC]->(tac:ATTACK_PATTERN)
RETURN t.id AS techniqueId, t.name AS techniqueName, tac.id AS tacticId, tac.name AS tacticName
LIMIT 1000
Run yourself →

Infrastructure publicly attributed to this actor.


MATCH (n)-[:ATTRIBUTED_TO]->(a:ACTOR {name: $name})
RETURN labels(n)[0] AS kind, n.name AS name
LIMIT 25
Run yourself →

Or query Whisper from your own LLM workflow via the Whisper MCP server.