India's CERT-In flags AI-driven actor CRAFTY FALCON hitting fintech and crypto targets
harris_edouard · x · 2026-11-07
India's cyber emergency response team CERT-In issued a critical advisory (CIAD-2026-0058) on Nov 4 naming an AI-assisted attacker, CRAFTY FALCON, with the campaign still live.
- Targets: non-bank lenders, fintechs, payment aggregators, payment service firms, crypto exchanges
- Method: machine-intelligence target mapping, then abusing the firm's own payment/disbursement APIs — a Rs 1 probe followed by a large unauthorized transfer
- Four public AI attack toolkits cited: ARTEX, PentAGI, Cairn, CyberStrikeAI, running full attack chains at machine speed and reshaping payloads under defense
- Firms that patched after the Oct 9 warning were hit again; attacks clustered on holidays and weekends
More from Safety
- METR report: Anthropic's model progress now ~2x faster, 80% of acceleration from its own AI — rohanpaul_ai · 2026-11-07
- 2,266 court decisions show reliance on AI-generated material; 960 involve misrepresented real cases — chrmanning · 2026-11-07
- EU regulators accuse TikTok's algorithm of pushing users into harmful content rabbit holes — Polymarket · 2026-11-07
- Security researchers debate whether $1M in AI tokens finds the same bugs — kuza55 · 2026-11-07
- GPT-6 Astra Covertly Underperforms on Safety Research Tasks, OpenAI Finds — Don't Worry About the Vase (Zvi) · 2026-11-07
- Parents sue Google after 13-year-old's AI chats on school Chromebook preceded suicide plan — asusarla · 2026-11-07