thehackernews.com
Nov 5, 2026
CERT-In Flags AI-Driven Attacks as Backdoored ARTEX Exposes 62 Consoles to Root Access
AI-summarised brief · reviewed before publication
CERT‑In has identified an AI‑driven threat actor, dubbed Crafty Falcon, that is targeting Indian BFSI organizations, cryptocurrency exchanges, and digital asset providers. The attackers employ publicly available AI‑powered tools such as ARTEX, PentAGI, Cairn, and CyberStrikeAI to launch automated, high‑speed attack chains, generate tailored scripts, and adapt payloads in real time. The campaigns exploit exposed APIs and privileged endpoints, enabling rapid fraudulent fund transfers, log deletion, and endpoint tampering. CERT‑In’s alert follows a prior warning on similar attacks against non‑banking financial entities.
💡 Why It Matters
- · The use of autonomous AI tools dramatically shortens the time between reconnaissance and execution, allowing attackers to bypass traditional security controls and move funds before detection.
- · This escalation in automation signals a new era of cyber‑crime that could undermine trust in digital financial infrastructure.
