According to CoinMeta, Wu said that on November 4th, the Indian Computer Emergency Response Team (CERT-IN) issued a security alert with a severity level of "critical," stating that attackers identified as "crafty falcon" were continuously targeting banks, fintech companies, payment service providers, and cryptocurrency exchanges. The alert noted that the attackers used AI auxiliary tools to find entry points into systems and abused the payment and allocation interfaces of the affected institutions to carry out unauthorized fund transfers. In cases targeting cryptocurrency exchanges and virtual digital asset service providers, there were also instances of wallet keys being stolen and funds being transferred out of the wallets. CERT-IN stated that such attacks are still ongoing.