CRAFTY FALCON targets Indian fintechs on weekends
Original title: Threat actor targets Indian fintechs on weekends when defenders aren’t watching
CERT-IN names actor CRAFTY FALCON and warns of active AI-powered attacks timed to low-monitoring periods.
India's CERT-IN has detected escalation in attacks by the AI-assisted actor CRAFTY FALCON targeting financial services. Attackers rewrite apps to enable unauthorized API calls and use low-monitoring windows including weekends. CERT-IN advises improved logging, real-time monitoring, and keeping test environments offline.
Unconfirmed: Links of AI tools to Chinese users are claimed but unconfirmed
- CRAFTY FALCON uses tools ARTEX, Cairn, and CyberStrikeAI
- Targets include digital lending platforms, payment providers, and wallet operators
- Small $0.01 test payments precede larger ones
- Attacks are active and escalating
Impact: unauthorized API calls and cryptocurrency theft
- 1.Improve logging and monitoring
- 2.Keep test environments offline
- 3.Restrict cloud resource access
- Vendors
- CERT-IN
- Threat actors
- CRAFTY FALCON
- Countries
- India
From the original article
2 min read at theregister.comCERT-IN warns of ‘significant escalation’ in AI-powered attacks, some after victims tried to improve defences
By Simon Sharwood · theregister.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.