News · Security & Hacks
Cybersecurity agency CERT-In reports attackers are operating at machine speed to siphon digital assets and compromise payment APIs.
Key point 1 of 3
01
CERT-In designated an AI-assisted threat actor dubbed 'CRAFTY FALCON' targeting crypto exchanges and fintech firms.
Key point 2 of 3
02
The attackers use automated penetration-testing tools, including ARTEX, to reverse-engineer code and execute payment API exploits.
Key point 3 of 3
03
CERT-In confirmed instances of stolen cryptocurrency wallet keys and drained balances, but did not name the affected exchanges.
Context
CERT-In first warned financial firms about the campaign in October before upgrading the alert to explicitly include digital asset platforms following confirmed key thefts.
Why it matters
Exchanges and nonbank financial firms face increased vulnerability to machine-speed intrusions, forcing teams to lower alert thresholds and bolster off-hours coverage.
What to watch
Whether Indian exchanges report formal disclosures of compromised balances or if CERT-In provides specific loss estimates tied to the campaign.
Sources
Built from 1 primary source, machine-checked before publication.
Keep reading
Read the full story
AI-generated, source-verified. Sources, citations and live prices on the article page.