CERT-In Flags AI-Driven Cyberattacks On Indian BFSI

CERT-In Warns BFSI On AI Attacks

India's cybersecurity watchdog has raised an alarm over a rising wave of artificial intelligence-assisted cyberattacks aimed at the banking, financial services and insurance sector. In an advisory dated November 4, 2026, the Indian Computer Emergency Response Team named the actor behind the campaign as 'CRAFTY FALCON', describing it as an AI-assisted financial threat actor. The group reportedly uses machine intelligence to pick targets, strike at machine speed, and abuse victims' own payment and disbursement APIs to push through unauthorised fund transfers. Banks, non-banking financial companies, fintech firms and other financial entities have been cautioned about the escalating threat.

Why It Matters For Businesses

CERT-In's Computer Security Incident Response Team-Finance said the campaign has intensified, with successful attacks still being reported across the financial ecosystem, and urged entities to treat it as an immediate and continuing threat. A notable concern is that organisations which had earlier received restricted advisories and carried out remediation have been targeted again, including cases where fixes were incomplete. Attacks have also been timed around holidays, weekends and periods of lighter monitoring, which can delay detection and response. The advisory points to the use of publicly available offensive AI tools, including the ARTEX family of LLM-based tools, the autonomous multi-agent penetration testing system PentAGI, the Cairn attack search engine and the CyberStrikeAI framework. These tools can run full attack chains on their own, rapidly generate customised attack scripts and adapt payloads based on how targeted systems respond. Supporting infrastructure shifts frequently, with IP addresses rotating within hours to days.

What To Watch Next

The November advisory follows an October warning from CERT-In about attackers using publicly available agentic AI tools for financially motivated intrusions, where…