India’s Computer Emergency Response Team (CERT-In) designated an AI-assisted threat actor “CRAFTY FALCON” in an updated warning about attacks on financial businesses, including cryptocurrency exchanges. The agency said the campaign is active and escalating, with reports of successful attacks even at firms that had received earlier advisories and taken remedial steps.
CERT-In said attackers stole cryptocurrency wallet keys and drained funds from wallets, but it did not name any affected exchanges or quantify losses. It said the attackers exploited vulnerable applications and exposed test environments, used AI tools to refine attack scripts, and in some incidents tested unauthorized transfers with small transactions before moving larger sums.
