India’s cyber agency CERT-In has rated a campaign against non-bank lenders, fintechs and payment firms Critical, and says the attackers used four publicly available AI offensive-security tools. The advisory, CIAD-2026-0058, was issued on 4 November.
It is the third Critical advisory on AI-assisted attacks that CERT-In has issued in 26 days, by our count, and it lists 27 recommended actions, up from 19 in the 9 October advisory it updates.
Business Pill · The Model and the Harness
An evergreen Business Engineer explainer on how a model and the harness around it work together. It teaches the general idea only and does not discuss CERT-In or the attacks.
The key insight: CERT-In says firms that had already been warned and had remediated were hit again; its 4 November update lists 27 recommended actions, up from 19 on 9 October, by our count.
The financial-sector team under CERT-In, CSIRT-Fin, has named the threat actor “CRAFTY FALCON”. The advisory describes it as “an AI-assisted financialthreat actor that surveys its targets with machine intelligence, operates at machine speed and strikes by invoking the victim’s own payment and disbursement APIs”.
The tools named are the “ARTEX” family, “PentAGI”, “Cairn” and “CyberStrikeAI”. The advisory says these tools “execute complete attack chains autonomously at machine speed”. It names no victim, gives no number of incidents and gives no amount lost.
The targets it lists include non-banking financial companies (NBFCs), digital lending platforms, fintech entities, payment aggregators, payment service providers and cryptocurrency exchanges.
CERT-In’s three Critical advisories on AI-assisted attacks in 26 days, and the recommended actions in the two financial-sector advisories. Source: CERT-In advisories CIAD-2026-0046, -0049 and -0058. The counts are ours.
What Was Posted on X
Holy Shit. In a new critical advisory issued TODAY, India’s cyber agency CERT-In says hackers are using AI-assisted tools to attack financial institutions, exploiting payment APIs and testing transfers with just ₹1 before moving larger sums.
CERT-In identifies the group as CRAFTY FALCON and says it is using FOUR publicly available AI offensive-security systems: ARTEX, PentAGI, Cairn and CyberStrikeAI.
The campaign is still succeeding against fintechs and NBFCs, including firms that had already been warned and attempted remediation. Some were deliberately targeted AGAIN, while attackers are timing intrusions around weekends and holidays when security monitoring is lower.
@choblin29 posted about CERT-In’s 4 November advisory at 14:31Z, listing the four tools CERT-In names and the Rs. 1 test transfers the advisory describes. The advisory itself, CIAD-2026-0058, is the source for every figure in this piece.
Warned, Then Hit Again
CERT-In says “The threat is active and ongoing”. It says CSIRT-Fin continues to receive reports of successful attacks, “including from NBFCs and fintech entities that had already received the earlier restricted (TLP:AMBER) advisories and had undertaken remediation”.
The same entities, it says, “have been deliberately re-targeted”, and attacks were timed “to coincide with holidays, weekends and other low-monitoring windows”. The advisory also describes “Micro-value test transactions (such as Rs. 1)” used to check a payment route before large transfers.
The Escalation in Numbers
The 9 October advisory, CIAD-2026-0046, rated Critical, spoke of “the possible use of AI-assisted offensive tooling”. On 15 October CERT-In issued CIAD-2026-0049, also Critical, titled “AI Agents as Attack Vectors”. The 4 November update names the tools and the actor, 26 days after the first, by our arithmetic.
The list of recommended actions grew from 19 to 27 between the two financial-sector advisories, by our count, about 42% more.
What Lenders Are Told to Do
The 9 October advisory already asked for maker-checker checks on fund movement and velocity limits. The update goes further into how payments are run: CERT-In tells entities to “Implement transaction velocity rules, new-beneficiary cooling periods and amount-band anomaly detection across all payment and disbursement paths”, and to flag small test payments to new beneficiaries followed by large ones.
It also asks for “heightened 24×7 security monitoring, with increased staffing and lowered alert thresholds during holidays, weekends and other low-coverage windows”, and tells firms to treat client apps as untrusted and validate every transaction on the server side.
The business lever here is the cost of instant payouts: new-beneficiary cooling periods, and maker-checker approval of merchant settlement instructions, which the update adds for payment aggregators, put extra steps into the fast disbursement that digital lenders and payment firms sell, and round-the-clock staffing adds cost.
A Second Warning From I4C
Reuters reported on 4 November that the Indian Cybercrime Coordination Centre (I4C) warned banks, non-bank lenders and other financial firms in an advisory made public that day. Reuters quoted it: “These attacks are financially motivated and are being carried out with the help of Artificial Intelligence (AI) agents leading to machine speed compromise”.
According to Reuters, I4C asked financial firms to implement the measures CERT-In set out on 9 October, and suggested daily and per-transaction limits and checks on beneficiary names.
On X, @choblin29 posted about the advisory at 14:31Z, listing the four tools and the Rs. 1 test transfers.
The Structural Read
As we read the advisory, the four tools it names are publicly available, so the barrier it describes is less access to tooling than the speed at which a firm can apply the 27 actions.
As we read the two advisories, the update moves part of the defence from IT into payment operations: cooling periods for new beneficiaries, flags on small test payments and maker-checker approval of merchant settlement instructions.
FOR DIGITAL LENDERS CERT-In asks for new-beneficiary cooling periods and velocity rules across all payment and disbursement paths, steps that sit inside the payout flow.
FOR PAYMENT AGGREGATORS The update asks for server-side validation, maker-checker approval and reconciliation of all merchant settlement instructions.
FOR SECURITY TEAMS CERT-In asks for 24×7 monitoring with more staff and lower alert thresholds on holidays and weekends.
The framework puts it this way: “It is where decisions are made about who gets access to frontier intelligence, under what conditions, and for which purposes.”
As we read it, the tools CERT-In names are publicly available offensive-security systems, outside the access controls the framework describes. The framework, published in June 2026, does not discuss CERT-In or CRAFTY FALCON.
The public advisory does not name the affected firms, the number of incidents or the money lost; CERT-In says a restricted version with indicators went to financial entities. We have not seen the I4C advisory itself; its wording here comes from Reuters. The advisory does not say who is behind CRAFTY FALCON or where it operates.
This Week In The AI Supercycle
Anthropic’s Reality Check, The Capital Squeeze, & The New World Order
This week’s issue: for two years the AI build-out was priced as a growthstory. This week it started being priced as a credit story.
CERT-In has named the actor and four public AI tools behind attacks on India’s non-bank lenders and fintechs, rated it Critical, and says firms that had already been warned were hit again. Its list of recommended actions grew to 27 from 19 in 26 days, by our count.
Also on 4 Nov: the US Office of the Comptroller of the Currency gave bank examiners a framework that sorts bank AI uses into 4 illustrative risk tiers, with a fully autonomous, customer-facing payment agent at Tier 1: OCC Gives Bank Examiners 4 AI Risk Tiers, Payment Agents Top.
A note on sourcing. The advisory text comes from CERT-In’s public advisories CIAD-2026-0058, CIAD-2026-0046 and CIAD-2026-0049 on cert-in.org.in. The I4C quotes come from Reuters. Counts of recommended actions and day differences are ours. This piece stays at the level of what the advisory tells financial firms to do and gives no attack detail.
Gennaro Cuofano is a CRO and tech executive who has worked in AI since late 2015, starting with bringing NLP, natural-language generation, voice and chatbot products to the marketing industry. His background is in law and finance: he holds a Master's degree in Law and an International MBA with an emphasis on corporate finance (LUISS Business School and the University of San Diego, 2012), and worked as a financial analyst at a real-estate investment firm in San Diego and as an assistant controller. His work focuses on business model strategy, business engineering and, more broadly, structural analysis: how companies make money, read from their own filings. He created FourWeekMBA and leads research there and at The Business Engineer, his newsletter on AI and business strategy, with over 95,000 subscribers and more than 1,000 published analyses. His writing has also appeared on Entrepreneur (for example, How to Digitize a Family Business in Europe) and HackerNoon. Find him on LinkedIn and Substack. See how we source.
