Crafty Falcon
Threat actorSecurity timeline
- Activity reported by The Register (Security)CERT-IN warns of escalating AI-assisted attacks on Indian financial firms by CRAFTY FALCON
Recent news
CERT-IN warns of escalating AI-assisted attacks on Indian financial firms by CRAFTY FALCON
CERT-IN has issued an update on CRAFTY FALCON, an AI-assisted threat actor targeting Indian digital lenders, fintechs, payment providers and wallet operators. The group probes internet-exposed test and development environments for shared credentials and tokens, then alters victims' applications to make unauthorised API calls that blend into normal traffic. Attacks are timed for holidays and weekends, and cryptocurrency exchanges have had wallet keys stolen.
CERT-In warns of ongoing AI-assisted attacks on Indian banking and financial firms
CERT-In has disclosed that an AI-assisted threat actor it tracks as Crafty Falcon is targeting organisations in the BFSI sector in India. The activity is described as active and ongoing and involves publicly available AI-driven offensive security tools. The excerpt provided does not include technical details or mitigations.