EXPLORINEER
en

Hatena

Information leaked after cyberattack; Chinese-language AI agent possibly exploited; traces found in attacks on 80 domestic companies

SecurityFirst seen 137 points


A Japanese security firm found that a Chinese-language AI agent called ARTEX may have been used in cyberattacks on about 80 Japanese companies. The attacks led to large leaks of personal data.

What happened

Many Japanese companies and groups have been hit by cyberattacks, and personal data has leaked in large amounts. A Japanese security company now says a Chinese-language AI agent was used in some of these attacks. The AI agent is designed to check computer systems for weak spots. The company found the tool's traces on servers used in the attacks.

Key numbers and facts

  • About 80 Japanese companies may have been attacked with this tool.
  • Investigators found 6 public servers outside Japan that were used in attacks between September 18 and October 18.
  • The targets include insurance, finance, and logistics companies.
  • At least 8 of the attacked companies have announced that information leaked.
  • The tool, called ARTEX, was shared publicly online in July by a developer who uses Chinese.

Some background

An AI agent is a program that can carry out tasks on its own, step by step. ARTEX was posted on a public website where people share technical information. It is known for quickly searching a system for many kinds of weak spots. This means that anyone can use it, including people who want to attack others.

Why it matters

This case shows that AI tools can make cyberattacks faster and easier to run at a large scale. Many companies could be at risk. Personal information that leaks can be misused, so companies need to find and fix weak spots quickly.

What to watch

  • Whether the security firm and other investigators confirm that ARTEX was the tool used.
  • How many more companies report data leaks.
  • Whether the developer or the website takes action about the shared tool.
  • How Japanese companies improve their defenses against AI-driven attacks.