The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
India's cybersecurity agency CERT-In has warned of escalating AI-powered cyberattacks by the group 'Crafty Falcon' targeting banks, fintech firms, and financial institutions. Using AI tools to automate attacks and exploit payment APIs, the campaign has led to unauthorized fund transfers and data breaches, causing significant financial harm.[AI generated]
Why's our monitor labelling this an incident or hazard?
The article explicitly mentions the use of AI-driven tools by a hacking group to breach financial institutions, causing unauthorized money transfers and data leaks. These harms fall under property harm and harm to communities. The AI systems' use in these attacks directly led to realized harm, meeting the criteria for an AI Incident rather than a hazard or complementary information.[AI generated]