JP — ITmedia
AI-Driven Intrusions Targeting Japanese Firms: Attackers Used the Autonomous Pentesting Tool "ARTEX" — GMO Cybersecurity by Ierae
Security2 min read
Security firm GMO Cybersecurity by Ierae says attackers used an AI-based hacking tool called ARTEX to break into Japanese companies. The tool was built to test computer systems for weak spots, but criminals misused it.
What happened
On October 19, 2026, GMO Cybersecurity by Ierae said it found attackers using ARTEX against Japanese companies. ARTEX is a free, open-source tool made in China. It uses outside AI language models to find weaknesses in computer systems. Its real purpose is to help defenders fix those weaknesses. The company said most of the attacks it tracked came from AI.
Key numbers and facts
- About 20 Japanese companies were targeted by the attack sources the company tracked.
- 9 of those companies were in the same industry.
- 8 of the targeted companies had announced data leaks in September and October.
- The company found 6 pieces of AI attack infrastructure aimed mainly at Japanese companies.
- In a separate case in South Korea, a U.S. security firm, CrowdStrike, reported ARTEX misuse against banks from late September to early October.
Background
AI language models are computer programs that can read and write text, like the AI chatbots many people use. Penetration testing, often called pen testing, means hacking your own system on purpose to find holes before real criminals do. ARTEX automates this work, so the same tool can help a defender or a criminal. In the South Korean case, attackers linked several AI models together, including ones from DeepSeek, Zhipu AI, and xAI.
Why it matters
This case shows that AI can make attacks faster and easier to run. GMO Cybersecurity says attackers are not only using AI to make hacking simple. Skilled attackers study the gaps between how companies attack and defend, then use AI to exploit those gaps. Companies in Japan need to watch for these attacks and protect their systems quickly.
What to watch
- Whether more Japanese companies report data leaks linked to these attacks.
- Whether the police and other law enforcement agencies take action, since GMO shared its findings with them.
- Which specific AI models the Japanese attackers used. The company did not name them in its blog post.
- Whether the open-source ARTEX tool gets changed to block misuse.
Glossary
- ARTEX
- A free, open-source tool that uses AI to automatically test computer systems for weak spots. Criminals misused it in these attacks.
- CrowdStrike
- A U.S. cybersecurity company that studies and reports on cyberattacks.