Crafty Falcon Runs AI Attack Tools Against Banks, and Copycat ARTEX Ships With a Root Backdoor
Ourtake
Attackers are automating intrusions with AI tools, and some users of those tools are being handed a backdoor of their own.
What happened
CERT-In disclosed an active campaign by an AI-assisted threat actor it tracks as Crafty Falcon, targeting banking, financial services and insurance organizations and crypto exchanges using publicly available AI-driven offensive tools. The attacks have resulted in theft of keys and funds. Separately, copies of the ARTEX tool on GitHub and Docker Hub were found serving a backdoored build that grants unauthenticated root access.