CERT-In Warns Indian Fintechs and NBFCs of AI-Assisted Cyberattacks

5 Nov 2026, 1:42 pm · 3h ago · 1 min read · YourStoryNew

The Indian Computer Emergency Response Team (CERT-In) has issued an advisory warning financial institutions against an escalating AI-driven cyberattack campaign dubbed CRAFTY FALCON. The threat actor leverages artificial intelligence to scout targets at machine speed and strike by invoking victims' payment and disbursement APIs to illicitly transfer funds. Impacted entities include NBFCs, digital lenders, fintech firms, payment aggregators, and cryptocurrency exchanges. CERT-In warned that multiple entities faced repeated attacks despite remediation, noting the threat remains active and uses publicly available AI offensive security tools to exploit merchant settlement workflows.