CERT-In warns of active AI-assisted Crafty Falcon attacks

India’s Computer Emergency Response Team (CERT-In) has warned that an active cyber campaign it calls Crafty Falcon is targeting financial firms, including fintech businesses and cryptocurrency exchanges. In a November 4 advisory, the agency said it continues to receive reports of successful intrusions and described attackers using artificial intelligence (AI) tools to automate parts of their operations. CERT-In said attackers have returned to some nonbanking financial companies and fintech firms that had previously taken corrective measures after warnings. In cases where weaknesses were not fully addressed, the organisations were targeted again. The agency said operations have also been timed for weekends, holidays and other periods when security monitoring may be reduced. According to the advisory, attackers used publicly available AI security tools to survey targets, generate and refine attack scripts, and adapt their payloads in response to target systems. CERT-In named ARTEX, PentAGI, Cairn and CyberStrikeAI among the tools identified. The agency said the tools can automate attack sequences, but the reporting does not provide case-level evidence linking each tool to a...