Artificial intelligence is creating new opportunities for businesses, but it is also introducing serious cybersecurity risks. India's cybersecurity agency has issued a critical war
Artificial intelligence is creating new opportunities for businesses, but it is also introducing serious cybersecurity risks. India's cybersecurity agency has issued a critical warning about an ongoing AI-assisted hacking campaign targeting financial institutions, fintech companies and cryptocurrency platforms.
What Is the Crafty Falcon Cyberattack?
The Indian Computer Emergency Response Team (CERT-In) has identified the campaign as Crafty Falcon. According to its November 4 advisory, attackers are using publicly available artificial intelligence tools to identify vulnerabilities, automate attacks and exploit financial systems.
The campaign primarily targets non-banking financial companies (NBFCs), digital lending platforms, fintech businesses, payment aggregators and cryptocurrency exchanges.
Unlike traditional cyberattacks that may require extensive manual intervention, these AI-assisted operations can execute multiple stages of an attack at machine speed.
AI Tools Used in the Cyberattacks
CERT-In identified several AI-driven offensive security tools associated with the campaign, including:
- ARTEX: An AI-based offensive security platform.
- PentAGI: An autonomous multi-agent AI penetration testing system.
- Cairn: An attack-search tool used in security operations.
- CyberStrikeAI: An AI-driven cybersecurity testing framework.
According to the advisory, these tools can generate customised attack scripts, automate attack chains and adapt their techniques based on how targeted systems respond.
Financial Systems and Payment APIs Under Threat
One of the most concerning aspects of this campaign is the exploitation of payment and disbursement APIs. These interfaces allow financial platforms to communicate with banking systems and process transactions.
Attackers reportedly exploit weaknesses in these systems to initiate unauthorised fund transfers. CERT-In also warned that some organisations were targeted again even after attempting to fix previously identified security vulnerabilities.
The attacks were reportedly timed around weekends, holidays and other periods when security monitoring may be reduced, making suspicious activity harder to detect quickly.
How Can Financial Companies Protect Their Systems?
Cybersecurity experts and financial technology companies should prioritise several security measures to reduce these risks:
- Implement continuous security monitoring and real-time alerts.
- Secure payment APIs with strong authentication and access controls.
- Regularly patch software vulnerabilities and exposed systems.
- Separate testing and staging environments from production systems.
- Monitor unusual payment activities and suspicious transactions.
- Use multi-factor authentication for privileged accounts.
- Maintain secure backups and an incident response plan.
What This Means for the Future of AI and Cybersecurity
The Crafty Falcon campaign highlights an important development in cybersecurity: artificial intelligence is becoming a tool for both defence and attacks.
Businesses can use AI to detect suspicious activity, identify software vulnerabilities and improve security monitoring. However, attackers can also use similar technologies to automate malicious operations and increase the speed of their campaigns.
For financial institutions, relying only on traditional security systems may no longer be sufficient. Continuous monitoring, secure API infrastructure and faster vulnerability management are becoming essential parts of modern cybersecurity strategies.
Final Thoughts
The latest CERT-In warning demonstrates why organisations must take AI-powered cybersecurity threats seriously. As automated attack techniques continue to evolve, financial companies need stronger security controls and faster incident response capabilities to protect customer information and financial transactions.
AI is changing the cybersecurity landscape, and organisations that invest in proactive security measures will be better prepared for emerging threats.