Choblin

Holy Shit. In a new critical advisory issued TODAY, India's cyber agency CERT-In says hackers are using AI-assisted tools to attack financial institutions, exploiting payment APIs and testing transfers with just ₹1 before moving larger sums. CERT-In identifies the group as CRAFTY FALCON and says it is using FOUR publicly available AI offensive-security systems: ARTEX, PentAGI, Cairn and CyberStrikeAI. The campaign is still succeeding against fintechs and NBFCs, including firms that had already been warned and attempted remediation. Some were deliberately targeted AGAIN, while attackers are timing intrusions around weekends and holidays when security monitoring is lower.