CERT-In flags an AI threat actor targeting BFSI payment APIs for unauthorized fund transfers
CERT-In issued a critical advisory updating prior warnings about BFSI entities facing attacks from the 'CRAFTY FALCON' threat actor, who deploys AI-driven offensive tools including ARTEX LLM-based tools, PentAGI (autonomous penetration testing), Cairn attack search engine, and CyberStrikeAI. The attacker targets cloud infrastructure via AWS Systems Manager and Lambda, exploits test and staging environments to reach production systems, reverse-engineers code for custom exploits, and bypasses IP filtering through third-party proxies.
Key points
- CRAFTY FALCON uses AI tools (ARTEX, PentAGI, Cairn, CyberStrikeAI) to target BFSI payment APIs.
- Attacker abuses AWS cloud services and leverages non-production environments to access production.
- Methods include code reverse-engineering, credential/token theft, and traffic routing bypass.
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. MediaNama did the reporting; read the original for the full story.
Read the full story at MediaNama
