CERT-In Warns AI-Powered Hacker Group Is Hitting India's Crypto and Fintech Firms

India’s cyber agency CERT-In rated a November 4 advisory Critical and named an AI-assisted actor CRAFTY FALCON, saying it stole wallet keys from crypto exchanges and made unauthorized transfers through fintech payment systems. Its finance unit CSIRT-Fin said the group moves money through victims’ own payment application programming interfaces, or APIs, sending test payments such as Rs. 1 before larger transfers; crypto exchanges and virtual digital asset service providers are also targets. CERT-In did not name affected firms or disclose losses. It said publicly available AI tools PentAGI and CyberStrikeAI appeared in the attacks, and that attackers returned to some non-banking financial companies and fintechs after earlier restricted warnings and timed raids for holidays and weekends.