CERT-IN warns of escalating AI-assisted attacks on Indian financial firms by CRAFTY FALCON
THREAT ACTORCERT-Inredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
CERT-IN has issued an update on CRAFTY FALCON, an AI-assisted threat actor targeting Indian digital lenders, fintechs, payment providers and wallet operators. The group probes internet-exposed test and development environments for shared credentials and tokens, then alters victims' applications to make unauthorised API calls that blend into normal traffic. Attacks are timed for holidays and weekends, and cryptocurrency exchanges have had wallet keys stolen.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Take development and test environments off the internet and restrict access to cloud resources.
- Improve logging of events and monitor for anomalies in real time with alerting.
- Monitor around the clock, especially during holidays and weekends.
- Fully remediate any earlier incident, as the group has returned to victims after incomplete clean-up.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
The Register (Security)
Who and what is in it
Threat actors
Products
Government agencies