As cited
Copy frozen at (site build).
threat intel
Threat actor targets Indian fintechs on weekends when defenders aren’t watching
India's Computer Emergency Response Team (CERT-IN) warned of escalating attacks by a threat actor dubbed CRAFTY FALCON targeting fintech companies, digital lending platforms, payment service providers, and cryptocurrency exchanges. The group uses artificial intelligence (AI)-enhanced attack tools and tactics including compromising internet-exposed development environments, rewriting applications to make unauthorized application programming interface (API) calls, and timing attacks during weekends and holidays to evade detection. CRAFTY FALCON tests stolen payment capabilities with micro-transactions before executing larger thefts and targets wallet keys at cryptocurrency exchanges.
Why it matters: Indian fintech, payment, and banking entities face active, escalating attacks designed to steal funds through API manipulation and cryptocurrency theft, with particular risk during low-monitoring periods and for organizations with incomplete remediation from prior incidents.
- Source published
- First seen by Cybersecurity Tracker