CERT-In flags backdoored ARTEX exposing 62 consoles to root access
The headline reports that a backdoored ARTEX exposes 62 consoles to root access, but the visible text is cut off before those details appear.
Written by a model from the sources below. Verify against them.
- Kind
- Malicious package
- Vendor
- ARTEX
- Status
- Reported, not confirmed
- First seen
Summary
The headline reports that a backdoored ARTEX exposes 62 consoles to root access, but the visible text is cut off before those details appear. The visible text says CERT-In reports that the AI-assisted threat actor Crafty Falcon is actively targeting Indian banking, financial services and insurance organizations.
What to do
Check whether ARTEX software or consoles are deployed in your environment
Restrict console access and rotate privileged credentials if ARTEX is in use
Review ARTEX console logs for unexpected root-level activity
Follow CERT-In advisories for updates on the backdoor
Timeline
- Made public by The Hacker News
- First seen by cve.now
Evidence 1
- PressThe Hacker News
“The Indian Computer Emergency Response Team (CERT-In) has disclosed that an artificial intelligence (AI)-assisted threat actor it tracks as Crafty Falcon is targeting organizations in the Banking, Financial Services, and Insurance (BFSI) sectors in the country.”
Corrections
None so far.
Something wrong on this page? Report an error. Every fix is listed here.
Questions about SZB-9fb3d806b5
Has ARTEX confirmed it?
The Hacker News reports it. No statement from ARTEX has reached cve.now yet.Source: The Hacker News
What should ARTEX users do?
Check whether ARTEX software or consoles are deployed in your environment. Restrict console access and rotate privileged credentials if ARTEX is in use. Review ARTEX console logs for unexpected root-level activity. Follow CERT-In advisories for updates on the backdoor.