Crypto Firms Under Attack: AI-Assisted CRAFTY FALCON Exploits Systems to Steal Digital Assets

CRAFTY FALCON is targeting crypto platforms with machine-speed attacks, using AI-driven tools to execute tailored exploits and steal digital assets. India’s Computer Emergency Response Team (CERT-In) has warned that an AI-assisted financial threat actor named CRAFTY FALCON is actively targeting banks, fintech companies, payment service providers, as well as cryptocurrency exchanges, stealing wallet keys and siphoning funds. According to CERT-In, the campaign has continued despite earlier warnings and remediation efforts. Affected entities, including non-banking financial companies (NBFCs) and fintech firms, have reported successful attacks. Funds At Risk The threat actor has been deliberately re-targeting entities that had already received restricted advisories, especially where remediation was incomplete. Attacks have also been timed to coincide with holidays, weekends, and other periods of low monitoring, which has delayed detection and response. CERT-In describes CRAFTY FALCON as a threat actor that surveys targets using machine intelligence, operates at machine speed, and exploits the victim’s own payment and disbursement APIs to move funds. The investigation has identified the...