What We Know
India’s cybersecurity agency CERT-In identified a campaign in which the hacking group Crafty Falcon used publicly available, China-linked AI tools to automate break-ins against Indian financial firms at what officials described as “machine speed.”3Backed by 3 sourcesThe Hindubusiness-standard.comCNA The reported targets include non-bank financial companies, banks, and other financial or crypto businesses.2Backed by 2 sourcesbusiness-standard.cominfosecurity-magazine.com
Officials warned that the attacks can exploit outdated software and poorly configured internet-facing servers to gain access to organisations’ systems.2Backed by 2 sourcesinfosecurity-magazine.comtheweek.in The campaign has also been linked to unauthorised fund transfers, with stolen money moved quickly into mule accounts across banks.1Backed by 1 sourceshindustantimes.com
Source Comparison
Aligned reportingCorroborates
- The Hindu↗Supports the account that CERT-In attributed automated, machine-speed break-ins against Indian financial firms to Crafty Falcon using China-linked, freely available AI tools.
- business-standard.com↗Supports the reported use of China-linked AI tools and identifies non-bank financial companies among the targets.
- CNA↗Corroborates the account that India’s cybersecurity agency reported publicly available AI tools being used to automate break-ins against financial firms.
- hindustantimes.com↗Supports the reported link between the campaign and unauthorised transfers, with funds moved quickly through mule accounts across banks.
- infosecurity-magazine.com↗Supports the reported targeting of financial and crypto businesses and the warning that outdated software and poorly configured internet-facing servers can enable access.
- theweek.in↗Supports the warning that attackers exploit outdated software and poorly configured internet-facing servers to gain access, while also identifying banks and NBFCs as targets.