{"id":1315539,"date":"2026-11-06T10:24:48","date_gmt":"2026-11-06T04:54:48","guid":{"rendered":"https:\/\/trak.in\/stories\/?p=1315539"},"modified":"2026-11-06T10:25:05","modified_gmt":"2026-11-06T04:55:05","slug":"ai-powered-cyber-attacks-targeted-at-banks-financial-institutions-warns-govt","status":"publish","type":"post","link":"https:\/\/trak.in\/stories\/ai-powered-cyber-attacks-targeted-at-banks-financial-institutions-warns-govt\/","title":{"rendered":"AI Powered Cyber Attacks Targeted At Banks, Financial Institutions – Warns Govt"},"content":{"rendered":"\n

India’s cybersecurity agency, the Indian Computer Emergency Response Team (CERT-In), has issued a critical-severity warning about an escalating campaign of artificial intelligence-powered cyberattacks targeting banks, non-banking financial companies (NBFCs), fintech firms and payment service providers.<\/p>\n\n\n\n

\"AI<\/figure>\n\n\n\n

The November 4, 2026 advisory identifies the threat actor as CRAFTY FALCON<\/strong>. According to CERT-In, attackers are using AI-driven tools to compromise financial institutions and exploit their own payment and fund-disbursement systems to execute unauthorised transactions at machine speed.<\/p>\n\n\n\n

The agency said successful attacks were continuing, including against organisations that had already received earlier security warnings and attempted to fix their vulnerabilities.<\/a><\/p>\n\n\n\n

How Hackers Are Using AI to Steal Money<\/strong><\/p>\n\n\n\n

CERT-In has identified several publicly available AI-driven offensive security tools being used in the campaign. These include the ARTEX family of large language model-based tools, PentAGI, Cairn and the CyberStrikeAI framework.<\/p>\n\n\n\n

These tools can automate different stages of a cyberattack, generate customised scripts in rapid succession and modify their techniques based on how target systems respond.<\/p>\n\n\n\n

The attackers are exploiting weaknesses in internet-facing applications, cloud infrastructure and automated payment systems. Once inside an organisation’s network, they attempt to access payment APIs and fund-disbursement interfaces to initiate fraudulent transfers.<\/p>\n\n\n\n

CERT-In has also identified attempts to compromise cloud services, including AWS Systems Manager and Lambda, to execute commands and deploy malicious files while blending activity with legitimate operations.<\/p>\n\n\n\n

Hackers Test Transactions Before Moving Larger Amounts<\/strong><\/p>\n\n\n\n

One particularly concerning technique involves using small-value transactions to check whether an unauthorised fund transfer is possible.<\/p>\n\n\n\n

According to CERT-In, attackers have conducted test transactions as small as \u20b91 before attempting larger transfers.<\/p>\n\n\n\n

Other methods identified in the campaign include:<\/p>\n\n\n\n