Crafty Falcon: CERT-In warns of AI-assisted attacks on Indian BFSI
CERT-In advisory CIAD-2026-0058 names Crafty Falcon, an actor that pairs AI offensive tooling with a victim's own payment APIs.
· CERT-In · Research by CSIRT-Fin
Crafty Falcon is an AI-assisted threat actor that CERT-In says attacks Indian lenders, fintechs and crypto exchanges by invoking their own payment and disbursement APIs. CERT-In rates the advisory critical and calls the threat ongoing.
01What happened
CERT-In issued advisory CIAD-2026-0058 on November 4, 2026, rated critical, and states that the threat is active and ongoing. CSIRT-Fin, the financial-sector team under CERT-In, designated the actor CRAFTY FALCON. The advisory updates CIAD-2026-0046 of October 9, 2026, which covered attacks on payment and disbursement APIs.
02How it works
Crafty Falcon surveys targets with machine intelligence and then invokes the victim's own payment and disbursement APIs with valid credentials, per CERT-In. The advisory names four AI offensive platforms in use, listed below. Entry comes through internet-exposed UAT, staging and test environments and moves to production over shared credentials or network paths, and the actor abuses cloud management services such as AWS Systems Manager and Lambda to run commands and deploy files. CERT-In says the actor sends micro-value test transactions, for example one rupee, before attempting large transfers, and bypasses IP allow-lists by routing traffic through whitelisted third-party fetcher IP pools.
03Who is affected
Indian banking, financial services and insurance entities are the stated targets, including NBFCs, digital lending platforms, fintech firms, payment aggregators, payment service providers, and cryptocurrency exchanges and virtual digital asset service providers. CERT-In adds that the actor re-targets organizations after incomplete remediation and times attacks for holidays, weekends and low-monitoring windows.
04What to do
Separate UAT and staging from production with no shared credentials or network paths, and alert on non-production access to production. Replace IP allow-listing of shared third-party fetchers with mutual TLS, signed requests or scoped API keys. Flag micro-value test transactions followed by large transfers, require maker-checker approval for merchant settlements, and report detections to incident@cert-in.org.in.
Questions people ask
- Does CERT-In name the AI tools Crafty Falcon uses?
- CERT-In advisory CIAD-2026-0058 names four AI offensive platforms: the ARTEX family of LLM-based tools, PentAGI, described as an autonomous multi-agent AI penetration testing system, the Cairn attack search engine, and CyberStrikeAI. CERT-In also advises organizations to prohibit offensive AI tools on corporate infrastructure, monitor LLM API usage, and require written authorization and scope for penetration tests.
- Who is in scope for the Crafty Falcon advisory?
- CERT-In directs CIAD-2026-0058 at Indian banking, financial services and insurance entities. The advisory lists NBFCs, digital lending platforms, fintech firms, payment aggregators, payment service providers, and cryptocurrency exchanges and virtual digital asset service providers. CERT-In adds that the actor re-targets organizations whose earlier remediation was incomplete, so a closed incident is not evidence the actor has gone.
- How does CIAD-2026-0058 differ from CERT-In's October advisory?
- CIAD-2026-0058 updates CIAD-2026-0046, which CERT-In issued on October 9, 2026 about attacks on payment and disbursement APIs. The November advisory names the actor CRAFTY FALCON, describes escalation, and adds tactics including abuse of AWS Systems Manager and Lambda, entry through internet-exposed test environments, web shells from file-upload and deserialization flaws, and theft of cryptocurrency wallet keys.
Sources 2 links, all fetched
- 1cert-in.org.inCERT-In Advisory
- 2thehackernews.comThe Hacker News