Eight targeted companies have disclosed data leaks since September, suggesting a single group is behind a wave of AI-driven intrusions across Japanese industries.
Chinese flags displayed in Beijing. (©Sankei/Shohei Mitsuka)
A Chinese-developed AI-powered penetration testing tool has been used in attempted cyberattacks against approximately 20 Japanese companies, according to a cybersecurity firm.
In an October 19 blog post, the Crime Countermeasures Center at GMO Cybersecurity by Ierae said it had investigated the infrastructure behind attempts to gain unauthorized access to Japanese companies.
The investigation identified the use of ARTEX, an AI-powered tool capable of conducting penetration tests autonomously. Of the approximately 20 companies targeted, nine were in the same industry.
The center noted that ARTEX had also reportedly been used in attacks against South Korean financial institutions since late September 2026. "It can be inferred that Japanese companies are also being attacked using the same methods," the post said.
Six Servers, Seven Industries
According to the company, the attack infrastructure it identified was used almost exclusively to target Japanese companies, based on the activity it was able to observe. Investigators identified six servers used to launch AI-powered attacks.
The targets spanned seven sectors: retail and distribution, education, gifts, printing, insurance, finance, and media.
Eight Companies Report Data Breaches
Of the companies targeted, eight publicly disclosed data breaches in September and October 2026. According to the blog post, this "suggests that multiple companies have fallen victim to attacks carried out by the same group."
GMO Cybersecurity by Ierae said it had shared its findings with law enforcement authorities to help prevent further attacks.
RELATED:
Cyberattacks Spur Japan's Breakthrough Ransomware Tool
(Read the article in Japanese.)
Author: Makoto Chiba, The Sankei Shimbun