AI attacks drain Rs 300 crore from Indian NBFCs, regulators stay silent

AI-powered cyberattacks reportedly stole about Rs 300 crore from small Indian NBFCs over roughly two months, with over 150 FIRs filed. Investigators link the attacks to Chinese platform CyberStrike and toolkits Artex and CyberStrike combined with open models DeepSeek, Qwen, Kimi and GLM. CERT-In and RBI advisories do not disclose the reported losses.

• Losses estimated at Rs 300 crore with over 150 FIRs filed
• Targets were NBFCs with turnover of about Rs 1,000 crore or less
• One Delhi NBFC lost Rs 7.5 crore, then another Rs 7.25 crore
• CERT-In mandates 6-hour reporting but publishes no loss figures