Hyderabad: Cyberabad police have initiated a criminal investigation after a city-based fintech company reported that hackers accessed its server and siphoned off Rs 1.39 crore from its bank account over the weekend.In the complaint, the CEO of the Hyderabad-based fintech company stated that the loss was discovered during the firm’s routine Monday audit on Sept 15. Internal checks revealed that unknown hackers had penetrated the company’s application servers and generated a series of fraudulent requests to partner Yes Bank, resulting in dozens of unauthorised fund transfers.“Initial probes suggest the perpetrators studied our systems, harvested legitimate credentials and then used a whitelisted IP address to masquerade as our platform,” the complaint alleged.A forensic report provided by payments-gateway partner Juspay indicated that the attackers’ initial payment requests were rejected. However, they later switched to a whitelisted IP address of the company, enabling the complainant’s bank to accept the fund transfers without raising any red flags. The complaint further alleged that the fraudsters had conducted cyber reconnaissance and planned the attack meticulously.Based on the complaint, Cyberabad cybercrime police registered a case under sections 318(4) (cheating and dishonestly inducing delivery of property), 319(2) (cheating by personation), 336(3) (forgery for the purpose of cheating), 338 (forgery of valuable security, will, etc.), and 340(2) (using as genuine a forged document or electronic record) read with 3(5) (common intention) of the BNS alongside Sections 65, 66-D and 72 of the Information Technology Act.“The company has provided details of their internal probe. It appears that fraudsters have exploited certain vulnerabilities in the system and gained access to the server. They carefully executed the fraudulent money transfers during the weekend office break between 10.49 pm on Sept 13 (Saturday) and 10.05 am on Sept 15 (Monday). We are analysing the transactions to identify and arrest the offenders,” said a cybercrime investigator.