Business · India Bureau
China-linked cyber tools target Indian financial sector in AI attacks
India's cybersecurity authority has identified four malicious tools deployed in coordinated attacks against non-bank lenders, fintech platforms and cryptocurrency exchanges, with security researchers attributing at least two tools to Chinese threat actors.
LSN India ·
The Indian Computer Emergency Response Team (CERT-In) has flagged four distinct cyber tools being weaponised in a wave of attacks targeting India's financial services ecosystem. The malicious instruments have been directed at non-bank financial companies, fintech startups and digital asset trading platforms, raising fresh concerns about the vulnerability of the country's growing but less-regulated financial technology sector.
Security researchers analysing the attack patterns and tool signatures have established links between at least two of the identified tools and Chinese-origin threat actors, according to CERT-In's findings. The discovery underscores the evolving sophistication of state-sponsored cyber operations targeting India's financial infrastructure, particularly segments that operate outside traditional banking oversight.
The attacks represent a shift toward artificial intelligence-driven methodologies, allowing threat actors to automate reconnaissance, vulnerability detection and payload deployment at scale. This technological advancement poses a particular challenge for smaller fintech firms and crypto exchanges that typically operate with limited cybersecurity resources compared to established banks.
CERT-In's identification of these tools comes as Indian authorities intensify scrutiny of cybersecurity practices across the financial services sector. The advisory is expected to prompt financial technology companies to conduct urgent security audits and implement enhanced detection mechanisms to identify compromise indicators associated with the identified tools.