CERT-In’s CRAFTY FALCON Advisory: AI Is the Accelerant, Your Payment APIs Are the Target

Reported by Cyble (Mihir Bagwe)

Summary by Cyber Security News11 Nov 2026, 12:19 CET

About this summary. This is a short excerpt from the description that Cyble published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://cyble.com/blog/crafty-falcon-ai-assisted-financial-threat-actor/

CERT-In's critical advisory, last week, gives a name to the campaign draining Indian fintechs: CRAFTY FALCON, an "AI-assisted financial threat actor" that moves money by calling its victims' own payment and disbursement APIs. Organizations that fixed their systems after CERT-In's first warning in October have been hit again. The AI label will get the headlines.

Read the full article at Cyble →

Source attribution: headline and facts are from Cyble (cyble.com). Summary method: excerpt of the source description. See our source attribution policy.