Skip to content
Cyber Attacks

3-Year MoU: Kerala Police Taps Cyble's AI for Underground Cybercrime Intel

The state force partners with an AI-native security firm to enhance cybercrime probes through shared intelligence and capacity building.

Illustration: A sleek black laptop sits on a dark desk, its screen displaying an abstract network of glowing blue nodes and connecting lines.
AI-generated illustration: DataSafe Times

Key points

  • Kerala Police signed a three-year Memorandum of Understanding with Cyble on October 12, 2026.
  • The deal covers intelligence support, investigative assistance and capacity building for cyber units.
  • Cyble will assist in identifying threats from underground forums and illicit marketplaces.

The short version

  • The agreement was executed through Cyble Infosec India Private Limited, the vendor's Indian subsidiary.
  • Support targets the Kerala Police Cyber Operations wing and the Cyberdome facility.
  • The partnership aims to identify and investigate emerging cyber threats across the state.

The details

Kerala Police formalized a three-year partnership with Cyble on October 12, 2026, according to The Cyber Express. The Memorandum of Understanding focuses on integrating threat intelligence into ongoing cybercrime investigations within the state. Cyble, which describes itself as an AI-native cybersecurity company, will provide intelligence support, investigative assistance and capacity building resources. The agreement was signed by Cyble Infosec India Private Limited, the firm’s subsidiary operating in India.

The collaboration specifically supports the Kerala Police Cyber Operations wing and the Cyberdome. These units will use the provided intelligence to identify and investigate emerging cyber threats. The arrangement allows law enforcement to access specialized data that helps track criminal activities before they result in significant harm to victims or infrastructure.

The context

Cyble states that cybercriminals increasingly rely on underground online forums and illicit marketplaces. These platforms are used to trade stolen credentials, distribute leaked data, coordinate ransomware operations and facilitate fraud, according to the vendor. Detecting these activities requires timely intelligence and effective collaboration between technology providers and law enforcement agencies. The MoU is designed to bridge that gap by providing the police with actionable data from these hidden channels.

What should you do?

Software developers should monitor official channels for updates on this partnership. While the deal affects law enforcement capabilities, it highlights the growing use of AI in threat detection. Teams should ensure their own security practices remain robust against credential theft and data leaks, which are primary targets for the criminals mentioned in the agreement.

Background: Ransomware

Ransomware exploits weak access controls and connected backups. Protect small teams by enforcing application allowlisting, keeping backups offline, and verifying that IT providers test recovery procedures regularly. These steps reduce attack surfaces without requiring expensive security software.

Read the full guide: Ransomware Risks for Small Teams: Low-Cost Defenses

What to do and how to stay safe: Cyble

  • Review your organization's data handling policies to ensure sensitive information is not exposed to public or semi-public forums.
  • Implement strong authentication measures to protect credentials from being stolen and traded on illicit marketplaces.
  • Monitor for signs of ransomware activity or unauthorized access attempts, as these are key areas of focus for the new intelligence partnership.
  • Stay informed about emerging cyber threats in your region, as law enforcement capabilities may evolve with new data sources.

General security guidance from the DataSafe Times newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

When did Kerala Police sign the agreement with Cyble?

The Memorandum of Understanding was signed on October 12, 2026, according to The Cyber Express.

What specific areas does the MoU cover?

The agreement covers intelligence support, investigative assistance and capacity building for cybercrime probes.

Which units within Kerala Police will benefit from this partnership?

The Kerala Police Cyber Operations wing and the Cyberdome will receive support under the deal.

Sources

  1. The Cyber Express
CybleKerala Policethreat intelligenceAI cybersecurityMoU

Related stories

Cybersecurity news without the noiseGet Alerts