Not India, but somewhat relevant:

It’s been confirmed that the Egyptian government recently carried out a targeted attack taking advantage of a 0-day on a presidential candidate’s phone: https://arstechnica.com/security/2023/09/how-the-iphone-of-a-presidential-candidate-in-egypt-got-hacked-for-the-2nd-time (Edit: Link was pointing to second page of the article; changed to first page)

Related discussion on Hacker News: https://news.ycombinator.com/item?id=37614816

Also this report from Google’s TAG: https://blog.google/threat-analysis-group/0-days-exploited-by-commercial-surveillance-vendor-in-egypt/

Never assume your devices are secure.

Always encrypt sensitive information.