CERT-In Flags AI-Powered Cyberattacks Targeting India's Financial Sector
India's cybersecurity agency CERT-In has warned financial institutions about an ongoing cyber campaign using artificial intelligence tools to automate attacks against non-banking financial companies, fintech platforms and cryptocurrency exchanges. The warning highlights growing cybersecurity risks as hackers increasingly use AI to identify vulnerabilities and automate unauthorised access.

India's cybersecurity preparedness is facing a new challenge as attackers increasingly use artificial intelligence to automate cyber intrusions. The Indian Computer Emergency Response Team (CERT-In) has identified a hacking group, referred to as "Crafty Falcon", targeting financial institutions through AI-powered tools.
According to the agency's advisory, attackers are using publicly available tools, including ARTEX, PentAGI, Cairn and CyberStrikeAI, to automate reconnaissance and security breaches.
The campaign reportedly targets non-banking financial companies (NBFCs), fintech organisations and cryptocurrency exchanges. Attackers have also been observed exploiting payment and disbursement systems and timing their activities around weekends and holidays to avoid detection.
CERT-In has described the threat as active and ongoing, highlighting the importance of stronger security monitoring, timely software updates, credential protection and regular vulnerability assessments.
The development underlines the need for Indian financial institutions to strengthen their cybersecurity infrastructure as AI becomes increasingly accessible to both businesses and cybercriminals.









