The eMudhra security incident raised concerns that cybercriminals could potentially use weak private keys to create fake website certificates and impersonate legitimate platforms. Here’s how such an attack could put users’ personal and payment details at risk, and what is known about the incident so far.