Hacking News
AI-assisted threat actor draining crypto exchange wallets
India's CERT-In has warned of an AI-assisted financial threat actor named CRAFTY FALCON targeting banks, fintechs, payment providers, and crypto exchanges to steal wallet keys and siphon funds. The threat actor uses machine intelligence to scan targets and hit them at machine speed, exploiting vulnerabilities in internet-exposed testing and staging environments, reverse-engineered app codebases, and modified app packages. The threat actor also uses cloud abuse and bypasses IP allow-listing to deploy malicious files inside the victim's infrastructure. CERT-In has already warned these firms once, but the campaign continues, with the threat actor re-hitting entities that already got restricted advisories where remediation was incomplete.