Backdoored ARTEX AI Tool Grants Root Access to 62 Consoles
CERT-In has identified an active threat actor, Crafty Falcon, deploying AI-driven offensive tools including a backdoored ARTEX image to compromise BFSI sector organisations in India, exposing 62 consoles to root-level access. The campaign demonstrates how publicly available AI-powered attack frameworks can autonomously execute full attack chains, adapt payloads in real time, and rotate infrastructure to evade detection. The attacks have extended to cryptocurrency exchanges, resulting in direct theft of keys and funds through abused payment and settlement APIs.