Hackers using China-linked AI tools targeted Indian financial firms
The Indian Computer Emergency Response Team identified a group called Crafty Falcon that breached fintech firms and cryptocurrency exchanges.
The Indian Computer Emergency Response Team (CERT-In) has identified a hacking group named Crafty Falcon that has targeted non-bank lenders, fintech firms, and cryptocurrency exchanges in India, according to a report by The Hindu on Wednesday.
The agency issued an advisory stating that the attackers use publicly available artificial intelligence (AI) tools to automate breaches at machine speed. The group surveys targets using machine intelligence and moves money through the victims' own payment and disbursement systems.
CERT-In named four tools used in the attacks: ARTEX, PentAGI, Cairn, and CyberStrikeAI. Security researchers have linked at least two of these tools to China, including ARTEX, which cybersecurity firm CrowdStrike said has been used in attacks on South Korean banks since late September.
The advisory noted that attacks were timed around holidays and weekends to delay detection when monitoring might be low. It also stated that firms were attacked again after making incomplete remediations to previously identified flaws.
While CERT-In did not state if the attacks were state-sponsored, it described the threat as active and ongoing. The agency did not specify the location of the group or the total amount of money stolen.
The advisory follows recent reports of cyber incidents, including a complaint involving two Mumbai-based non-bank lenders that allegedly lost about $2 million through unauthorised transfers from ICICI Bank accounts on October 8 and 9.
