CERT-In Flags AI-Assisted Cyberattacks Targeting Indian Financial Services Sector

5 Nov 2026, 1:30 pm · 4h ago · 1 min read · Inc42

Cybersecurity watchdog CERT-In has issued a critical warning to banks, non-banking financial companies, and fintech firms over an escalating wave of AI-driven cyberattacks. The threat actor, identified as 'CRAFTY FALCON', uses machine intelligence to scan targets at machine speed and exploit payment and disbursement APIs to execute unauthorised fund transfers. CERT-In’s CSIRT-Fin division reported that attacks continue across the financial ecosystem, repeatedly targeting institutions even after initial remediation. The agency urged all BFSI entities to treat the campaign as an immediate threat and tighten their API security monitoring.