India Alerts on China-Linked AI Hacks Hitting Financial Firms
India’s cybersecurity agency raises the alarm. CERT-In warns that hackers use Chinese-linked AI tools to attack financial firms. The group, called Crafty Falcon, strikes non-bank lenders, fintech companies, payment providers, and crypto exchanges.
Attackers deploy four AI tools: ARTEX, PentAGI, Cairn, and CyberStrikeAI. Researchers link at least two to China. ARTEX, a China-made tool, already hit South Korean banks. These tools scan targets at machine speed. They exploit payment systems and move money through the victims’ own APIs.
Hackers act fast. They test small transfers first. Then they scale up. Some firms face repeat attacks even after cleanup. Several Indian lenders reported breaches in recent weeks. The campaign remains active and ongoing.
CERT-In issued the advisory on November 4. Officials say the tools automate every stage of the attack. They generate custom scripts and adapt to defenses in real time. Public availability makes the tools easy for criminals to grab and use.
This marks a shift in cyber threats. Traditional hacks took days. AI compresses the process into hours. Financial firms lose money and face deeper intrusions. India joins other nations facing similar AI-driven campaigns.
Security teams must respond. Firms need stronger monitoring of payment APIs. They should patch systems quickly and watch for unusual small transactions. AI on the attack side demands AI-powered defense.
The warning arrives amid rising tensions over technology and security. Chinese-linked tools appear in multiple country reports. Indian agencies track the activity closely. Banks and fintechs must treat this as a high priority. The threat grows as AI tools improve.
Authorities urge immediate reporting of incidents. Early detection limits damage. Crafty Falcon shows how quickly AI changes the rules of cybercrime. Financial institutions ignore it at their own risk.
