The Indian Computer Emergency Response Team (CERT-In) has issued an official warning about increased activity by a group operating under the designation CRAFTY FALCON. According to the agency's assessment, the campaign's organizers have significantly scaled up attacks using artificial intelligence tools targeting cryptocurrency exchanges and non-custodial wallets.
The key feature of the campaign is the use of generative AI to automate and increase the persuasiveness of phishing scenarios. The attackers generate convincing messages, fake interfaces, and social engineering lures that are increasingly difficult to distinguish from legitimate communications from trading platforms. It is the human factor, rather than technical vulnerabilities in infrastructure, that is becoming the primary entry point.
What's Behind the Warning
Both exchange employees and ordinary users are affected. CERT-In emphasizes that the attackers combine social engineering methods with automated analysis of open data, allowing them to precisely select victims and mimic trusted services. For the crypto industry, where transactions are irreversible and compromise of private keys means irrevocable loss of funds, this vector represents an elevated threat.
The CERT-In warning reflects a broader trend: AI is ceasing to be an exclusively defensive tool and is becoming an equal element of the offensive arsenal. Regulators and market operators are forced to revise cybersecurity models, focusing on behavioral analysis, multi-factor authentication, and real-time anomaly monitoring.
Cryptalist Analysis: The escalation of AI campaigns against crypto infrastructure signals a structural shift in the threat landscape — the cost of attack is decreasing while its scalability is growing. For exchanges and custodial services, this means the need to invest in protection at the level of user behavior, not just the perimeter. The market should expect tightening of regulatory requirements for cyber resilience, which in the medium term could become an additional factor in industry consolidation around large, well-protected players.