India’s cybersecurity agency CERT-In named “CRAFTY FALCON” a threat actor escalating an AI-assisted campaign against cryptocurrency exchanges and other financial institutions. The attackers stole wallet keys, drained funds and exploited vulnerable applications, test environments, shared credentials, access tokens and cloud infrastructure. According to CERT-In, AI tools enabled the rapid generation of attack scripts and the development of tailored exploits, while some operations were scheduled for weekends and holidays to delay detection. The agency urged round-the-clock monitoring, lower alert thresholds and increased staffing, but did not name the affected exchanges or quantify the losses. Recent attacks have also targeted non-bank lenders, fintech companies, payment aggregators and service providers.
Source: Read the original article
