# Crafty Falcon: CERT-In warns of AI-assisted attacks on Indian BFSI

> CERT-In advisory CIAD-2026-0058 names Crafty Falcon, an actor that pairs AI offensive tooling with a victim's own payment APIs.

- **Severity:** Medium: Real and reproducible, but needs unusual setup, user help or a narrow audience. Plan a fix.
- **Category:** Incident
- **Published by:** CERT-In
- **Disclosed:** 2026-11-04
- **Affects:** Indian BFSI entities, AWS Systems Manager, AWS Lambda
- **Research by:** CSIRT-Fin
- **Primary source:** https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES02&VLCODE=CIAD-2026-0058
- **Page:** https://theinjection.dev/items/certin-crafty-falcon-bfsi/

Crafty Falcon is an AI-assisted threat actor that CERT-In says attacks Indian lenders, fintechs and crypto exchanges by invoking their own payment and disbursement APIs. CERT-In rates the advisory critical and calls the threat ongoing.

## What happened

CERT-In issued advisory CIAD-2026-0058 on November 4, 2026, rated critical, and states that the threat is active and ongoing. CSIRT-Fin, the financial-sector team under CERT-In, designated the actor CRAFTY FALCON. The advisory updates CIAD-2026-0046 of October 9, 2026, which covered attacks on payment and disbursement APIs.

## How it works

Crafty Falcon surveys targets with machine intelligence and then invokes the victim's own payment and disbursement APIs with valid credentials, per CERT-In. The advisory names four AI offensive platforms in use, listed below. Entry comes through internet-exposed UAT, staging and test environments and moves to production over shared credentials or network paths, and the actor abuses cloud management services such as AWS Systems Manager and Lambda to run commands and deploy files. CERT-In says the actor sends micro-value test transactions, for example one rupee, before attempting large transfers, and bypasses IP allow-lists by routing traffic through whitelisted third-party fetcher IP pools.

## Who is affected

Indian banking, financial services and insurance entities are the stated targets, including NBFCs, digital lending platforms, fintech firms, payment aggregators, payment service providers, and cryptocurrency exchanges and virtual digital asset service providers. CERT-In adds that the actor re-targets organizations after incomplete remediation and times attacks for holidays, weekends and low-monitoring windows.

## What to do

Separate UAT and staging from production with no shared credentials or network paths, and alert on non-production access to production. Replace IP allow-listing of shared third-party fetchers with mutual TLS, signed requests or scoped API keys. Flag micro-value test transactions followed by large transfers, require maker-checker approval for merchant settlements, and report detections to incident@cert-in.org.in.

## Quick facts

- **Advisory:** CIAD-2026-0058, issued November 4, 2026
- **CERT-In rating:** Critical, active and ongoing
- **Actor:** CRAFTY FALCON, designated by CSIRT-Fin
- **Targets:** Indian NBFCs, fintechs, payment aggregators, crypto exchanges
- **AI tooling named:** ARTEX family, PentAGI, Cairn, CyberStrikeAI
- **Supersedes:** Updates CIAD-2026-0046 of October 9, 2026
- **Reporting:** incident@cert-in.org.in, fraud to I4C via CFCFRMS

## Questions

### Does CERT-In name the AI tools Crafty Falcon uses?

CERT-In advisory CIAD-2026-0058 names four AI offensive platforms: the ARTEX family of LLM-based tools, PentAGI, described as an autonomous multi-agent AI penetration testing system, the Cairn attack search engine, and CyberStrikeAI. CERT-In also advises organizations to prohibit offensive AI tools on corporate infrastructure, monitor LLM API usage, and require written authorization and scope for penetration tests.

### Who is in scope for the Crafty Falcon advisory?

CERT-In directs CIAD-2026-0058 at Indian banking, financial services and insurance entities. The advisory lists NBFCs, digital lending platforms, fintech firms, payment aggregators, payment service providers, and cryptocurrency exchanges and virtual digital asset service providers. CERT-In adds that the actor re-targets organizations whose earlier remediation was incomplete, so a closed incident is not evidence the actor has gone.

### How does CIAD-2026-0058 differ from CERT-In's October advisory?

CIAD-2026-0058 updates CIAD-2026-0046, which CERT-In issued on October 9, 2026 about attacks on payment and disbursement APIs. The November advisory names the actor CRAFTY FALCON, describes escalation, and adds tactics including abuse of AWS Systems Manager and Lambda, entry through internet-exposed test environments, web shells from file-upload and deserialization flaws, and theft of cryptocurrency wallet keys.

## Sources

1. [CERT-In Advisory](https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES02&VLCODE=CIAD-2026-0058)
2. [The Hacker News](https://thehackernews.com/2026/11/backdoored-docker-image-for-artex-ai.html)