# CERT-In warns of AI-assisted attacks on Indian financial firms

_Published Thursday, November 5, 2026 at 12:49 PM EST · Security, AI · Latest · Tier 2 — Notable_

![CERT-In warns of AI-assisted attacks on Indian financial firms — Primary](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiA5xlxteigxw9PDEVogRmGjD3vyPuJRyKCuIAOmURy0CY-OLXfYOjC93BPb_gvifLUiVoUk9JcjmxtsGpkT-cYhlrTwXS6yodTv-WwHnPUKvahU67tc5R841Sb_hkIIsUkzNzne5Fzo0h6BUpzEW1770YFBayYksyjSc9pKOV3VsHfoHcPfu3mYAFOQW4K/s1700-nu-rw-lo-l85-e365/docker-ai.jpg)

India's CERT-In warned that an AI-assisted threat actor it calls Crafty Falcon is conducting active attacks against banking, financial services and insurance organizations. The agency said cryptocurrency exchanges and digital asset providers have also suffered theft of keys and funds.

Attackers steal API credentials and invoke fund-transfer interfaces from victims' own allow-listed infrastructure, bypassing application controls. Separately, researcher Badbyte identified a backdoored ARTEX security-tool image that permits unauthenticated root access. Between November 2 and 4, 62 internet-facing ARTEX consoles were found serving the backdoored build, exposing security findings, credentials and captured sessions.

## Sources

- [The Hacker News](https://thehackernews.com/2026/11/backdoored-docker-image-for-artex-ai.html)

---
Canonical: https://techandbusiness.org/newswire/8M7foRnFWlFTgpTZcE4vwN
Published: 2026-11-05T17:49:48.391Z
Story chronology: 2026-11-05T08:42:00.000Z
Retrieved: 2026-11-06T22:49:49.713Z
Publisher: Tech & Business (techandbusiness.org)