Choose Rich Live
TechCrypto News

CERT-In warns AI-assisted hacker group Crafty Falcon is targeting crypto and fintech firms

India's cybersecurity agency CERT-In has warned financial institutions, including crypto exchanges and fintech firms, that an AI-assisted hacking group known as CRAFTY FALCON is stealing wallet keys, probing APIs with cheap AI agents, and draining funds.

Digital graphic featuring a robot with a security shield facing a hooded cyber attacker with a calendar reading weekend.
Image: @Saanjana_Nikita

India's cybersecurity agency, CERT-In, has issued an alert regarding increased activity from an artificial intelligence-assisted hacker group dubbed CRAFTY FALCON, according to Cointelegraph. The group has stepped up operations targeting cryptocurrency exchanges and fintech firms with the objective of stealing wallet keys and draining funds.[3][4]

The attackers have been utilizing small test transfers—including ₹1 transactions—to confirm access before moving significantly larger sums from financial firms, Business Today reported. Attackers reportedly deploy cheap AI agents that probe APIs and test systems around the clock, allowing them to accelerate intrusion speeds and strike when security personnel are less active, such as on weekends.[1][2]

CERT-In also cautioned that AI-assisted attackers are returning to previously compromised financial firms following incomplete cleanups, according to CryptoSlate. With crypto exchanges among the impacted entities, the cybersecurity agency urged affected organizations to conduct forensic checks to verify that intruders have been entirely removed.[5]

Key facts

  • India's CERT-In issued an alert warning that an AI-assisted hacker group named CRAFTY FALCON is targeting crypto exchanges and fintech firms.
  • The primary objectives of the attacks include stealing wallet keys and draining funds.
  • Hackers have used ₹1 test transactions before transferring larger sums from targeted financial firms.
  • Attackers are deploying cheap AI agents to probe APIs and test systems continuously, often timing larger thefts during weekends when security teams are less active.
  • CERT-In warned that hackers are re-entering financial institutions due to incomplete remediation after earlier breaches.
  • The agency urged affected entities to conduct forensic evaluations to ensure intruders are fully purged from systems.

Sources · 5 sources

  1. BT

    Business Today@business_todayPost on X ·

    #TechToday | AI hackers use ₹1 test transactions to move bigger sums from financial firms: CERT-In warns https://t.co/7dOsNNt9BO

    Open source
  2. SN

    Saanjana Nikita@Saanjana_NikitaPost on X ·

    india's cybersecurity agency just warned exchanges, lenders and payment apps about a hacking group using everyday ai tools they start with small test transfers, then go after bigger amounts when security teams are less active, especially on weekends ai is making attacks faster too. while we talk about ai agents with wallets that can move money, attackers are using cheap agents to probe apis and test systems all day for builders in crypto, security can't be an afterthought anymore. separate wallets, spending limits, human approval for large transactions and a clear onchain record should be there from the start. vibe-coded apps that skip these checks are easy targets are we building security into our products from day one, or planning to deal with it later?

    Open source
  3. CO

    Cointelegraph@CointelegraphPost on X ·

    🚨 ALERT: India’s CERT-In warns an AI-assisted hacker group dubbed “CRAFTY FALCON” has stepped up attacks on crypto exchanges and fintech firms to steal wallet keys and drain funds. https://t.co/nDGFa7hXYQ

    Open source
  4. AI

    Analytics Insight@analyticsinmePost on X ·

    𝐂𝐄𝐑𝐓-𝐈𝐧 का अलर्ट, भारत के क्रिप्टो एक्सचेंज पर बड़ा खतरा! भारत में क्रिप्टो एक्सचेंज पर 𝐀𝐈 हैकर्स का खतरा बढ़ गया है। 𝐂𝐑𝐀𝐅𝐓𝐘 𝐅𝐀𝐋𝐂𝐎𝐍 ग्रुप वॉलेट की चाबियां चुराकर लाखों की रकम उड़ा रहा है। जानिए 𝐂𝐄𝐑𝐓-𝐈𝐧 ने क्या चेतावनी दी। #CRAFTYFALCON #CERTIn #AIHacking #CryptoNews #CryptoSecurity #Cybersecurity #Fintech #CryptoExchange #AnalyticsInsightNews https://t.co/MF6rnYWZY8

    Open source
  5. CR

    CryptoSlate@CryptoSlatePost on X ·

    AI-assisted hackers are returning to financial firms after incomplete cleanups, @IndianCERT warns. Crypto exchanges are among those affected, with wallet keys stolen. The agency urges forensic checks that intruders are gone. via @akibablade https://t.co/yOTUjSTjB4

    Open source