Not India, but somewhat relevant:
It’s been confirmed that the Egyptian government recently carried out a targeted attack taking advantage of a 0-day on a presidential candidate’s phone: https://arstechnica.com/security/2023/09/how-the-iphone-of-a-presidential-candidate-in-egypt-got-hacked-for-the-2nd-time (Edit: Link was pointing to second page of the article; changed to first page)
Related discussion on Hacker News: https://news.ycombinator.com/item?id=37614816
Also this report from Google’s TAG: https://blog.google/threat-analysis-group/0-days-exploited-by-commercial-surveillance-vendor-in-egypt/
Never assume your devices are secure.
Always encrypt sensitive information.
On a somewhat related note, a lot of this spyware and 0-days happen to be bought from Israel.
Not that it necessarily relates to the current situation, but I just find it funny that many countries have had access to this type of stuff via backroom deals with Israel, even with countries who are publicly against Israel.
Ex: Pakistan, Bangladesh, and Egypt