AI-powered cyberattacks siphon ₹300 crore from small NBFCs in two months

AI‑powered cyberattacks siphoned ₹300 crore from India’s small NBFCs in just two months, with investigators tracing the breaches to Chinese hacking platforms that leveraged open‑source AI toolkits for automated credential stuffing and deep‑fake phishing. For website owners, this surge signals that AI‑driven bots are no longer limited to content scraping—they can now mimic legitimate user behavior, bypass CAPTCHAs, and harvest sensitive data at scale. Sites handling financial transactions, personal data, or login portals are especially vulnerable, as the same AI models used by the attackers can generate convincing phishing emails and automate credential‑guessing attacks in real time. **Actionable steps:** 1. **Update your llms.txt** to explicitly disallow AI‑generated crawlers and any bot identifying itself with “GPT‑Bot”, “Claude‑Bot”, or similar headers, and require verification tokens for all POST requests. 2. **Deploy behavior‑based bot detection** that monitors mouse movement, timing anomalies, and device fingerprint consistency; flag any sessions that exhibit AI‑typical patterns such as sub‑second form submissions. 3. **Integrate real‑time threat intel feeds** from platforms tracking Chinese hacking groups and AI toolkit signatures, automatically updating firewall rules and rate‑limiting policies when new malicious AI signatures are reported.