The CERT-In advisory says hackers compromise internet-facing apps, exposed APIs and privileged endpoints and then steals payment aggregator and partner bank API credentials to "invoke fund transfer APIs within the entities own infrastructure"
This story is only covered by news sources that have yet to be evaluated by the independent media monitoring agencies we use to assess the quality and reliability of news outlets on our platform. Learn more here.