UPDATE: India flags Crafty Falcon group in AI-driven crypto breaches
CIE News ·
Update to India's CERT-In warns AI-assisted hackers are targeting crypto exchanges
Based on reporting by BeInCrypto; not yet independently confirmed.
India's CERT-In and CSIRT-Fin identified the group Crafty Falcon as the entity using AI tools to compromise crypto exchanges and drain wallet keys.
Indian authorities have identified the threat group Crafty Falcon as the entity behind an AI-driven hacking campaign targeting cryptocurrency exchanges. As previously reported, India's cybersecurity agency had warned of ongoing AI-assisted attacks against crypto firms operating at machine speed.
On November 5, 2026, CERT-In and CSIRT-Fin stated that the group is using AI tools, including ARTEX, PentAGI, and CyberStrikeAI, to compromise infrastructure and reverse-engineer applications. According to the warning, the attackers breached virtual digital asset service providers to steal wallet keys, execute payment API calls, and drain funds. CERT-In reported that the campaign remains active, with ongoing digital asset transfers and key thefts under investigation.
Key facts
- Threat actor: Crafty Falcon
- Agencies: CERT-In and CSIRT-Fin
- Tools: ARTEX, PentAGI, CyberStrikeAI
- Exchanges and keys compromised
Read the original at BeInCrypto