India’s CERT-In names Crafty Falcon group using AI tools against financial firms
See how this story connectsIndia’s cybersecurity agency CERT-In named the hacking group Crafty Falcon in an advisory issued on Wednesday, saying it has breached non-bank lenders, fintech firms and cryptocurrency exchanges using publicly available AI tools to automate break-ins. The advisory names four tools, ARTEX, PentAGI, Cairn and CyberStrikeAI, and security researchers have linked at least two of them to China. CERT-In did not name the affected companies, say who was behind the breaches or say how much money was stolen.
Why it matters
Non-bank lenders, fintech firms and crypto exchanges in India face attacks that move money through victims’ own payment and disbursement systems, timed around holidays and weekends.
- When
- 4 Nov 2026
- ID
WTA-N-2026-0724- Where
- India
- Who
- CERT-In, Crafty Falcon
- Topics
- Cybersecurity, AI incidents, Financial risk
- System
- publicly available AI attack tools ARTEX, PentAGI, Cairn and CyberStrikeAI
- Operator
- Crafty Falcon (named by CERT-In)
- Type
- AI-automated break-ins at non-bank lenders, fintech firms and crypto exchanges, moving money through victims’ payment systems
- Status
- advisory issued 4 Nov 2026; affected companies not named; disclosed by CERT-In · Incident ledger
Summary written with AI by wheresthe.ai, from Reuters via The Economic Times and the reporting credited above. Checked against the source on 5 Nov 2026.
Source copy: saved on 5 Nov 2026 to check this story and not republished, because the text belongs to its publisher. Also held by the Internet Archive.
Cite this story
WTA-N-2026-0724: “India’s CERT-In names Crafty Falcon group using AI tools against financial firms.” wheresthe.ai, 4 Nov 2026. https://wheresthe.ai/d/in-india-s-cert-in-names-crafty-falcon-group-using-ai-tools-a-2026-11/ (source: Reuters via The Economic Times).
Spotted an error? Email [email protected].