India Sees Surge in API Attacks, Especially in Banking, Utilities

Indusface’s Q3 2024 telemetry indicates India-based organizations faced nearly 1.2 billion attacks (up 92% YoY vs. 26% globally), including 377M DoS events and 215M bot-based requests, with attackers shifting from DDoS toward exploiting websites and APIs—enabled in part by LLM-fueled accessibility of exploit scripts. BFSI entities experienced roughly 2× the global average attack rate and power/energy 4×, while systemic gaps—low API security automation, slow patching of critical CVSS issues, and prevalent misconfigurations and auth failures—compound risks alongside common flaws such as blind SQL injection, SSRF, and HTML injection.