CERT-In warns crypto exchanges of AI-driven attacks
Key points
- India's CERT-In has warned cryptocurrency exchanges about an escalating AI-assisted hacking campaign identified as CRAFTY FALCON.
- The campaign uses autonomous AI tools to exploit payment APIs, steal wallet keys and transfer cryptocurrency.
- Attackers target financial institutions, fintech platforms and virtual digital asset service providers using automated techniques.
India's Computer Emergency Response Team (CERT-In) has flagged an escalating AI-powered hacking campaign targeting cryptocurrency exchanges and financial institutions.
The agency identified CRAFTY FALCON, an AI-assisted threat actor exploiting payment and disbursement APIs to execute unauthorised transfers.
CERT-In described the campaign as an immediate and continuing threat, with attackers operating at machine speed.
The investigation found hackers targeting cryptocurrency exchanges and virtual digital asset providers, stealing wallet keys and siphoning funds.
Attackers deploy AI-driven tools including ARTEX, PentAGI, Cairn and CyberStrikeAI to automate attacks and refine malicious scripts.
The campaign also exploits cloud infrastructure, exposed testing environments and compromised application credentials to access production systems.
CERT-In warned that previously targeted financial institutions faced repeated attacks following incomplete security remediation, including during weekends and holidays.
The advisory urges cryptocurrency platforms to strengthen wallet security and transaction monitoring against automated threats.
