banking cybersecurity

CERT-In issued a critical-severity advisory on 4 November 2026 about an active campaign it calls CRAFTY FALCON. The campaign targets banks and other financial organisations, including NBFCs, fintech firms, payment providers and cryptocurrency platforms. CERT-In says attackers use AI-assisted tools to speed up their operations and exploit payment and disbursement APIs to make unauthorised transfers.