← Back to overview

CERT-In has identified an active threat actor known as Crafty Falcon targeting India's Banking, Financial Services, and Insurance (BFSI) sector. The threat actor leverages AI-assisted offensive security tools to conduct attacks. A backdoored Docker image for ARTEX AI has been linked to the campaign, exposing 62 consoles to root access. The activity is described as ongoing and sophisticated. The use of publicly available AI-driven tools marks a notable evolution in the threat landscape. CERT-In has flagged this as a high-priority concern for financial sector organizations in India.

Affected products

  • ARTEX AI
  • Docker

Related threat actors

  • Crafty Falcon

Categories

  • Critical Infrastructure
  • Emerging Technologies
  • Ransomware & Malware
  • Supply Chain & Dependencies