CERT-In warns of AI-assisted attacks on Indian financial firms

India's CERT-In warned that an AI-assisted threat actor it calls Crafty Falcon is conducting active attacks against banking, financial services and insurance organizations. The agency said cryptocurrency exchanges and digital asset providers have also suffered theft of keys and funds. Attackers steal API credentials and invoke fund-transfer interfaces from victims' own allow-listed infrastructure, bypassing application controls. Separately, researcher Badbyte identified a backdoored ARTEX security-tool image that permits unauthenticated root access. Between November 2 and 4, 62 internet-facing ARTEX consoles were found serving the backdoored build, exposing security findings, credentials and captured sessions.