Govt warns fintech firms of cyberattacks targeting payment infra

India's cybersecurity agency, CERT-In, has warned non-banking financial companies, fintech firms and digital payment service providers about cyberattack campaigns targeting payment and disbursement application programming interfaces. The attacks exploit these interfaces to carry out unauthorised fund transfers. The agency has recommended strengthening API security to prevent such attacks.