1. Social Media Platform Ban & Backlash

In early September 2025, Nepal’s government ordered 26 social media platforms — including Facebook, X (Twitter), YouTube, Instagram, LinkedIn, Signal, Snapchat, Reddit, Discord, and others — to register with authorities. Non-compliant platforms were blocked, sparking Gen Z–led protests over free expression and digital rights. After violent clashes that left dozens dead, the government lifted the ban.

Read More

2. Sidewinder APT Exploits Protests

While protests shook the streets, the cyber group Sidewinder exploited the situation. Fake emergency apps (like “Nepal Emergency Service” or “Gen_Ashok_Sigdel_Live.apk”) were used to spread malware. Once installed, these apps requested dangerous permissions allowing theft of personal data, files, camera, and microphone access.

3. Spike in Cybercrime Cases

Nepal recorded 18,926 cybercrime cases in fiscal year 2024–25, averaging 52 cases per day. Though slightly lower than the previous year, experts warn underreporting may mask the true scale of cyber threats.

4. Education Ministry Data Breach

A major security incident hit Nepal’s Ministry of Education, Science, and Technology. Hackers stole about 1.4 TB of sensitive data including academic records, personal details, and policy documents. The breach highlights urgent needs for stronger government cybersecurity protocols.

5. VPN Use & Rising Risks

During the social media ban, many Nepalis turned to VPNs. However, cybersecurity experts warn that untrusted VPN providers may steal data or expose users to malware, creating even more digital risks.

6. Nepal’s Cybersecurity Gaps

Reports highlight outdated systems, weak incident response, and lack of a unified national CERT. Experts urge better cryptography, internet backup infrastructure, and stronger awareness programs to safeguard Nepal’s digital future.