孟买,10月30日 - 三位知情人士表示,印度央行已警告银行,金融基础设施面临的网络攻击日益增加,要求银行提供遵守现有规则的证明,以及其应对人工智能相关风险的准备情况详情。
MUMBAI, Oct 30 - India's central bank has warned banks of rising cyberattacks on financial infrastructure, seeking proof of compliance with existing rules and details of their preparedness for AI-related risks, three people familiar with the matter said.
印度储备银行(RBI)的警惕性提升之际,正值全球银行正遭受黑客使用先进人工智能工具的攻击,客户数据和资金面临风险。
The Reserve Bank of India's (RBI) increased vigilance comes at a time when banks worldwide are being targeted by hackers using sophisticated AI tools, putting customer data and funds at risk.
路透社本月早些时候报道,包括美国和英国在内的监管机构正加大努力,以控制人工智能风险。
Regulators including those in the United States and Britain are stepping up efforts to contain AI risks, Reuters reported earlier this month.
三位消息人士表示,在最近的一系列会议上,RBI要求银行检查应用程序编程接口(API)中的弱点,即银行用于与非银行贷款机构和金融科技公司建立联系的软件链接。
In a series of recent meetings, the RBI asked banks to probe weaknesses in application programming interfaces, the software links banks use to connect with non-bank lenders and fintechs, the three sources said.
其中一位消息人士(一位了解监管机构想法的人士)表示,黑客将较小的贷款机构、非银行贷款机构及其第三方供应商视为“较软弱的目标”。
Hackers see smaller lenders and non-bank lenders and their third-party vendors as "softer targets", said one of the sources, a person aware of regulatory thinking.
第二位消息人士(一位与顶级银行合作的顾问)表示,尽管RBI已就网络安全风险管理向银行发布指令,但执行滞后。该人士表示,这促使监管机构敦促银行加强执行。消息人士因讨论尚未公开而拒绝具名。RBI未立即回应置评请求。
While the RBI has already issued directives to banks on managing cybersecurity risk, implementation lags, said a second source, a consultant working with top banks. This has prompted the regulator to push banks for stronger implementation, the person said. The sources declined to be named because the discussions are not public. The RBI did not immediately respond to a request for comment.
贷款机构遭受攻击 印度近几周网络事件激增。在该国最大的贷款机构印度国家银行,3900名客户的数据泄露。该银行上周表示,正在调查,尚未确定漏洞。
ATTACKS ON LENDERS India has seen a surge in cyber incidents in recent weeks. At State Bank of India, the country's largest lender, data of 3,900 customers was leaked. The bank said last week it is investigating and has yet to determine the vulnerability.
另一起案件中,根据路透社审阅的一份警方投诉,两家位于孟买的非银行贷款机构在10月8日至9日期间,通过ICICI银行账户发生了超过700笔未经授权的即时转账,损失约200万美元。
In another case, two Mumbai-based non-bank lenders lost about $2 million in more than 700 unauthorised instant transfers from accounts held with ICICI Bank on Oct. 8-9, according to a police complaint reviewed by Reuters.
投诉称,黑客入侵了用于向ICICI银行发送贷款拨款指令的API链接。
Hackers compromised the API link used to send loan disbursal instructions to ICICI Bank, the complaint said.
印度网络安全机构CERT-In在10月9日发布的一份通报中警告称,黑客正在窃取银行的API凭证,以从贷款机构自身的系统中转移资金,可能使用了AI辅助工具。
India's cyber agency CERT-In warned in an advisory on Oct 9 that hackers are stealing banks' API credentials to move money out of lenders' own systems, possibly using AI-assisted tools.
该机构在其社交媒体账号上发帖称,本周早些时候,它为来自55多家金融机构的300名官员举办了网络安全培训。
Earlier this week, it ran cybersecurity training for 300 officials from over 55 financial institutions, the agency said in a post on its social media handle on