A hacking group designated as Crafty Falcon is deploying automated software tools—including ARTEX and PentAGI—to survey targets and execute unauthorized disbursements at machine speed. The attackers systematically launch intrusions during holidays and weekends, even returning to re-exploit entities that implemented incomplete security remediations. This threat emerges amid wider institutional turmoil, as Indian regulators enact tighter controls following multiple high-profile balance debits and data leaks across local banks.
Key points
Hackers are actively manipulating internal payment and disbursement systems to transfer i…: Hackers are actively manipulating internal payment and disbursement systems to transfer institutional funds without triggering standard detection.
Incomplete security patches leave victim institutions vulnerable to repeated compromise f…: Incomplete security patches leave victim institutions vulnerable to repeated compromise from automated threat actors seeking easy re-entry.
Multiple recent security failures and unauthorized debits have driven the Reserve Bank of…: Multiple recent security failures and unauthorized debits have driven the Reserve Bank of India to enforce stricter network defenses.
Sources checked by our analysis pipeline: 1
India's cybersecurity agency said the attackers used publicly available AI tools to automate break-ins "at machine speed", calling the threat "active and ongoing".
BENGALURU/MUMBAI: India's cybersecurity agency named the hacking group behind a wave of AI-driven attacks on financial firms and identified its tools, at least two of them linked to China, adding India to a growing list of countries where such tools have been used against banks.
The group, which the Indian Computer Emergency Response Team (CERT-In) calls "Crafty Falcon," has breached non-bank lenders, fintech firms and cryptocurrency exchanges, according to an advisory issued on Wednesday (Nov 4).
CERT-In did not say who was behind the breaches or where the organisation operates.
The advisory came after a spate of cyberattacks on Indian banks and non-bank lenders in recent weeks, even as authorities issued warnings and the Reserve Bank of India tightened cybersecurity checks.
CERT-In said the attackers use publicly available AI tools to automate break-ins "at machine speed", calling the threat "active and ongoing".
It named four tools: ARTEX, PentAGI, Cairn and CyberStrikeAI. Security researchers have linked at least…
Emergency crews contained a battery fire Thursday morning inside Digital Realty's PDX11 facility in Hillsboro, Oregon, which is leased by Elon Musk's social media company. The incident targets a critical infrastructure hub that became one of the platform's two remaining core sites after a consolidation effort in late 2022. While personnel evacuated safely, potential disruptions to platform server operations remain unconfirmed.
Militaries are accelerating directed-energy programs to resolve the economic imbalance of using expensive interceptors against low-cost unmanned aerial systems. By advancing airborne and ground-based prototypes, major defense forces aim to secure continuous firing capacity to protect critical assets from saturation strikes. These investments demonstrate a shift toward scalable solutions capable of neutralizing cruise missiles and hostile surveillance at the speed of light.
Security decisions established within authorization servers directly govern downstream trust by establishing caller authentication, token lifetimes, and issuance rules. When identity configurations drift or external providers modify claim formats, operational API outages occur that leave engineers troubleshooting endpoints rather than authentication mappings. Treating identity infrastructure as an active architectural control plane prevents multi-tenant data leaks and systemic service failures.