{"id":3990,"date":"2026-11-05T10:44:01","date_gmt":"2026-11-05T10:44:01","guid":{"rendered":"https:\/\/thedigitalfortress.us\/?p=3990"},"modified":"2026-11-05T10:44:01","modified_gmt":"2026-11-05T10:44:01","slug":"cert-in-flags-ai-driven-attacks-as-backdoored-artex-exposes-62-consoles-to-root-access","status":"publish","type":"post","link":"https:\/\/thedigitalfortress.us\/?p=3990","title":{"rendered":"CERT-In Flags AI-Driven Attacks as Backdoored ARTEX Exposes 62 Consoles to Root Access"},"content":{"rendered":"<div id=\"articlebody\">\n<div class=\"separator\" style=\"clear: both;\"><a href=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEiA5xlxteigxw9PDEVogRmGjD3vyPuJRyKCuIAOmURy0CY-OLXfYOjC93BPb_gvifLUiVoUk9JcjmxtsGpkT-cYhlrTwXS6yodTv-WwHnPUKvahU67tc5R841Sb_hkIIsUkzNzne5Fzo0h6BUpzEW1770YFBayYksyjSc9pKOV3VsHfoHcPfu3mYAFOQW4K\/s1700-nu-rw-lo-l85-e365\/docker-ai.jpg\" style=\"display: block;  text-align: center; clear: left; float: left;\"><\/a><\/div>\n<p>The Indian Computer Emergency Response Team (CERT-In) has disclosed that an artificial intelligence (AI)-assisted threat actor it tracks as <strong>Crafty Falcon<\/strong> is targeting organizations in the Banking, Financial Services, and Insurance (BFSI) sectors in the country.<\/p>\n<p>Describing the threat as active and ongoing, the activity involves the use of publicly-available AI-driven offensive security tools like ARTEX, PentAGI, Cairn, and CyberStrikeAI.<\/p>\n<p>\u00abThese tools execute complete attack chains autonomously at machine speed, generate and refine large numbers of tailored attack scripts in rapid succession, and adapt their payloads based on target responses,\u00bb CERT-In <a href=\"https:\/\/www.cert-in.org.in\/s2cMainServlet?pageid=PUBVLNOTES02&amp;VLCODE=CIAD-2026-0058\" target=\"_blank\">said<\/a>. \u00abThe supporting attack infrastructure rotates IP addresses within hours to days.\u00bb<\/p>\n<p>The agency said the attacks have also targeted cryptocurrency exchanges and digital asset service providers, resulting in the theft of keys and funds.<\/p>\n<p>The update follows an <a href=\"https:\/\/www.cert-in.org.in\/s2cMainServlet?pageid=PUBVLNOTES02&amp;VLCODE=CIAD-2026-0046\" target=\"_blank\">October 2026 alert<\/a> issued by CERT-In, which warned of multiple cyber attack campaigns targeting non-banking financial companies (NBFCs), digital lending platforms, fintech entities, payment service providers, and cryptocurrency wallet operators.<\/p>\n<p>Threat actors have been observed exploiting internet-facing applications and exposed APIs and privileged endpoints to steal payment aggregator\/gateway and partner-bank API credentials, and then invoke fund-transfer APIs directly from within the entities&#8217; own allow-listed infrastructure.<\/p>\n<div class=\"dog_two clear\">\n<div class=\"cf\"><a href=\"https:\/\/thehackernews.uk\/ai-governance-platform-d\" rel=\"nofollow noopener sponsored\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" class=\"lazyload\" alt=\"Cybersecurity\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEi9hjzSN2bSutSbaNO6ZWEm02wC6hue03kC4VKPSfsdPvcDX2PAvPE-u9QrLCw3POvN3hXFPlyYyFgkAgtKrs4I2oSb9BkIFOWQ_k1ISfIBdT2AoWNvq2Q2DF_3AyA4fJriKPHkTjqYFxu-Y_H4IH9uqscX8lh-puQ5cPmc_veAEr9p4fC0497XT8Fktlp6\/s728-nu-rw-lo-l85-e365\/tl-insidem-d.jpg\" width=\"729\" height=\"91\"\/><\/a><\/div>\n<\/div>\n<p>Some of the other notable initial access vectors are listed below &#8211;<\/p>\n<p><a name=\"more\"\/><\/p>\n<ul>\n<li>Use of stolen long-lived static, hard-coded API tokens<\/li>\n<li>Supply chain compromise of source code repositories via forged commits<\/li>\n<li>Exploitation of plaintext credentials in configuration files, source code, or databases<\/li>\n<li>Access to applications and remote services lacking multi-factor authentication (MFA)<\/li>\n<\/ul>\n<p>This approach, CERT-In added, defeats application-level controls such as loan creation, KYC, sanction, beneficiary verification, balance sufficiency, and per-transaction limits.<\/p>\n<p>The rapidly executed fraudulent transactions are designed to move funds to attacker-controlled mule accounts across multiple banks. In addition, the attacks involve the operators taking steps to delete logs and tamper with endpoint security tools in an attempt to complicate detection and incident response efforts.<\/p>\n<p>CERT-In also warned that attackers are targeting cloud infrastructure to execute commands and deploy malicious payloads, as well as publicly-accessible non-production environments to obtain shared credentials, tokens, or network paths, and then use them to pivot to production systems.<\/p>\n<p>Other notable post-exploitation actions undertaken by the adversary are as follows &#8211;<\/p>\n<ul>\n<li>Reverse-engineering application codebases to develop tailored exploits<\/li>\n<li>Initiating unauthorized API calls using modified application packages, undermining controls that \u00abassumed only the legitimate client application would call the APIs\u00bb<\/li>\n<li>Executing micro-value test transactions (such as Rs. 1) to validate unauthorized fund flows before executing large-value transfers<\/li>\n<li>Abusing merchant settlement APIs of payment aggregators to move funds<\/li>\n<li>Exploiting newly disclosed vulnerabilities, including file-upload and deserialization exploit chains leading to web shells in PHP and Node.js applications<\/li>\n<li>Creating a large number of custom scripts on the fly and iteratively improving them in quick succession, a pattern consistent with AI-assisted development<\/li>\n<\/ul>\n<p>The development comes as CERT-In has published the Artificial Intelligence Security Auditing Guidelines, laying out specific requirements to ensure the \u00abgovernance, security, privacy, fairness, transparency, resilience and auditability of AI systems.\u00bb<\/p>\n<p>The framework calls for testing an AI agent&#8217;s documented identities, authorized objectives, approved tool use, permission boundaries, and its adherence to the principle of least privilege (PoLP). It also requires AI agents to require human approval for consequential actions, while ensuring high-risk AI systems incorporate emergency interruption, credential revocation, and controls for preventing automatic restarts.<\/p>\n<p>\u00abEffective assurance requires organisational accountability, technical testing, data and model governance, continuous monitoring, human oversight, incident response and third-party assurance,\u00bb the agency <a href=\"https:\/\/www.cert-in.org.in\/s2cMainServlet?pageid=GUIDLNVIEW02&amp;refcode=CISG-2026-04\" target=\"_blank\">said<\/a>. \u00abAccordingly, the framework provides auditable requirements proportionate to the nature, scale, autonomy and potential impact of each AI system.\u00bb<\/p>\n<h3>Copycat ARTEX Version Hands Out Root Shell<\/h3>\n<p>The abuse of open-source penetration testing tools like ARTEX in real-world intrusions prompted its developer to take down the repository from GitHub. But multiple copies have sprung up on the Microsoft-owned code-hosting platform to fill the void &#8211;<\/p>\n<ul>\n<li>github[.]com\/trhhubsd\/ARTEXX<\/li>\n<li>github[.]com\/mhtsec\/ARTEX (\u00ab<a href=\"https:\/\/hub.docker.com\/r\/mianhuatang11\/artex\" target=\"_blank\">mianhuatang11\/artex<\/a>\u00bb on Docker Hub)<\/li>\n<li>github[.]com\/RuoJi6\/ARTEX<\/li>\n<\/ul>\n<p>The first two GitHub repositories are no longer available for download. According to an independent cybersecurity researcher who goes by the online alias <a href=\"https:\/\/badbyte.io\/artex-backdoor-docker-image\/\" target=\"_blank\">Badbyte<\/a>, the \u00abtrhhubsd\/ARTEX\u00bb repository was starred 2,449 times and forked over 600 times.<\/p>\n<p>What&#8217;s notable about the GitHub copy is that it changed a single line in \u00abdocker-compose.yml\u00bb to pull the \u00ab<a href=\"https:\/\/hub.docker.com\/r\/tomicdd\/artex\" target=\"_blank\">tomicdd\/artex<\/a>\u00bb image from Docker Hub. The modified version conceals a new routine that grants a root shell during an unauthenticated request to the login endpoint. Per statistics shared by Docker Hub, the image has been downloaded 9,000 times.<\/p>\n<p>\u00abIt adds a hidden verifyCaptcha() function to the login handler: if the CAPTCHA field starts with a secret marker, the rest runs through sh -c as root and the output is returned, before any credential check,\u00bb the researcher said in a statement shared with The Hacker News via email. \u00abThat&#8217;s an unauthenticated root shell on every install, and it never shows up in a code review.\u00bb<\/p>\n<p>\u00abA compromised ARTEX instance holds its targets&#8217; unpatched findings, live credentials, captured sessions and network position. Whoever holds the backdoor can also quietly change what the agents do on the next run.\u00bb<\/p>\n<div class=\"dog_two clear\">\n<div class=\"cf\"><a href=\"https:\/\/thehackernews.uk\/network-defense-dd\" rel=\"nofollow noopener sponsored\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" class=\"lazyload\" alt=\"Cybersecurity\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEiWypk5aSrjVVXdRpyJaxKDe9VERLYId6cVdoZUwHGSe-EMh90qROsc-jk3uEKqB8-L4eSpBaka7err1zF86IrsEA4S2IZ8yyEsoZTsiGq2YvGuaCtdFvE8-ej7uEBhLbYJNENjs9umU6qmZCJ1aAzvG-ZDO0NtTVddy5hIGv4FBpDJp8UeOxYEzF5AeuK1\/s728-nu-rw-lo-l85-e36\/core-d.png\" width=\"729\" height=\"91\"\/><\/a><\/div>\n<\/div>\n<p>As many as 62 ARTEX consoles on the internet have been found to serve the backdoored build between November 2 and 4, 2026, with the first instance going up by October 20, 2026, twelve days after the Docker image was pushed. Of these, 26 consoles are located in the U.S., followed by 17 in Hong Kong and seven in China.<\/p>\n<p>In all, a total of 1,645 hosts have been found serving the ARTEX console as of November 4, 2026. Besides \u00abtomicdd\/artex,\u00bb a number of Docker Hub namespaces have been identified as publishing images named \u00abartex.\u00bb Some of them are listed below &#8211;<\/p>\n<ul>\n<li>congdonglinux\/artex (also backdoored and identical to \u00abtomicdd\/artex\u00bb)<\/li>\n<li>mianhuatang11\/artex<\/li>\n<li>autumn26\/artex<\/li>\n<li>andy1099zz\/artex<\/li>\n<li>dgddw\/artex<\/li>\n<li>trhhubsd\/ARTEX<\/li>\n<li>ylh440104\/artex<\/li>\n<\/ul>\n<p>\u00abThe backdoor&#8217;s author needed nothing more. The people they were after had already chosen to run an unvetted attack tool as root on an open port,\u00bb Badbyte said. \u00abWe know ARTEX has been used maliciously in the wild, and it will keep being used that way. We also know that plenty of legitimate, curious people installed it to see what the fuss was about. They did not sign up for a root shell on their own server.\u00bb<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>The Indian Computer Emergency Response Team (CERT-In) has disclosed that an artificial intelligence (AI)-assisted threat actor it tracks as Crafty Falcon is targeting organizations in the Banking, Financial Services, and&hellip;<\/p>\n","protected":false},"author":1,"featured_media":3991,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[130,403,3717,24,1154,1795,4061,985,542,61],"class_list":["post-3990","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-access","tag-aidriven","tag-artex","tag-attacks","tag-backdoored","tag-certin","tag-consoles","tag-exposes","tag-flags","tag-root"],"_links":{"self":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts\/3990","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3990"}],"version-history":[{"count":0,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts\/3990\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/media\/3991"}],"wp:attachment":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3990"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3990"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3990"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}