TrendAI Details CyberStrikeAI’s 44-Agent Workflow in Japan-Linked Attacks
Summary
TrendAI analyzed three exposed environments linked to attacks using AI in different ways, including CyberStrikeAI’s 44-agent workflow. One separate intrusion reportedly stole records and credentials from a GIS server.
Key points
- TrendAI said three exposed environments contained reconnaissance and attack tools, target lists, results, logs, and command histories.
- In one case, CyberStrikeAI used 44 agents to automate reconnaissance, vulnerability validation, exploitation, command and control, persistence, data exfiltration, and reporting.
- The CyberStrikeAI activity conducted validation against at least 19 identifiable organizations, including at least 16 in Japan; the reported validation does not establish successful compromise of those organizations.
- A separate 24-day intrusion reportedly used default credentials to access an exposed GIS server and steal cadastral and commercial records, Windows credentials, and email data.
- Researchers said a third operator used AI to develop tools and scripts and was estimated to have run at least six campaigns targeting exposed VPN devices and WebLogic servers.
- TrendAI found no evidence that the three cases shared an operator; it said activity linked to the first and third cases also appeared in other regions.
Article Details
- Event Type
- Three cyberattack cases involving AI, including AI-driven operations and attacks assisted by AI, targeting organizations in Japan and other regions.
- Impact
- At least 19 identifiable organizations, including at least 16 in Japan, underwent validation activity in the CyberStrikeAI case. A separate intrusion reportedly stole cadastral and commercial records, Windows credentials, and email data from a GIS server. Other described activity targeted exposed edge devices, VPN devices, and WebLogic servers. The article does not establish that the three cases shared an operator.
MITRE ATT&CK
T1078.001 · Default AccountsAn intrusion reportedly accessed a GIS server using default credentials.T1110.003 · Password SprayingMicrosoft said Storm-0940 used ARTEX to automate password-spraying attacks.T1190 · Exploit Public-Facing ApplicationThe reported attacks exploited exposed servers and edge devices using vulnerabilities; the article does not identify specific vulnerabilities.T1595 · Active ScanningThe CyberStrikeAI workflow included reconnaissance and vulnerability discovery against target organizations.
People
Threat Actors
Vendors
Ciscoa limited role played by the technology in a series of campaigns designed to target edge devices from Cisco, Citrix, F5, and Yamaha using published vulnerabilities, management functions, or credentials present inCitrixrole played by the technology in a series of campaigns designed to target edge devices from Cisco, Citrix, F5, and Yamaha using published vulnerabilities, management functions, or credentials present inConnectWiseLast week, Microsoft revealed that a China-state-aligned threat actor compromised a ConnectWise cloud backup application and used ARTEX to sign in to more than 2,250 Microsoft 365 tenants. The activity has beenF5role played by the technology in a series of campaigns designed to target edge devices from Cisco, Citrix, F5, and Yamaha using published vulnerabilities, management functions, or credentials present in configurationMicrosoftengineering, shortening the time between exposure and exploitation of security flaws. According to Microsoft's 2026 Digital Defense Report, AI has collapsed the median time from vulnerability discovery toYamahaby the technology in a series of campaigns designed to target edge devices from Cisco, Citrix, F5, and Yamaha using published vulnerabilities, management functions, or credentials present in configuration files.
Products
Tools
Apex AIup a new monetization avenue that peddles stolen AI provider session tokens and offensive AI tools APEX AI, MessiahGPT, and DarkGPT, further commoditizing cybercrime and lowering the barrier to entry for carryingARTEXcyber operations, described them as distinct from previously published attacks that have leveraged ARTEX, an autonomous AI penetration testing framework, to single out entities in South Korea and Japan.CyberStrikeAIThe first of the three attacks has been found to abuse CyberStrikeAI, another open-source penetration testing tool that was previously put to use in an attack campaign targeting Fortinet FortiGate appliances. TheDarkGPTavenue that peddles stolen AI provider session tokens and offensive AI tools APEX AI, MessiahGPT, and DarkGPT, further commoditizing cybercrime and lowering the barrier to entry for carrying out advanced,MessiahGPTnew monetization avenue that peddles stolen AI provider session tokens and offensive AI tools APEX AI, MessiahGPT, and DarkGPT, further commoditizing cybercrime and lowering the barrier to entry for carrying out
Countries
ColombiaTaiwan and Hong Kong, while the third case featured organizations in the U.K., France, Italy, Qatar, and Colombia in its WebLogic discovery lists.Francetargeted organizations in Taiwan and Hong Kong, while the third case featured organizations in the U.K., France, Italy, Qatar, and Colombia in its WebLogic discovery lists.Hong Kongcountries like South Korea. The operator behind the first case has targeted organizations in Taiwan and Hong Kong, while the third case featured organizations in the U.K., France, Italy, Qatar, and Colombia in itsItalyorganizations in Taiwan and Hong Kong, while the third case featured organizations in the U.K., France, Italy, Qatar, and Colombia in its WebLogic discovery lists.JapanCybersecurity researchers have disclosed details of three cyber attacks targeting organizations in Japan in which artificial intelligence (AI) was a key element, either in the driving seat or to assist a human operator.Qatarin Taiwan and Hong Kong, while the third case featured organizations in the U.K., France, Italy, Qatar, and Colombia in its WebLogic discovery lists.South Koreathat have leveraged ARTEX, an autonomous AI penetration testing framework, to single out entities in South Korea and Japan.Taiwanneighboring countries like South Korea. The operator behind the first case has targeted organizations in Taiwan and Hong Kong, while the third case featured organizations in the U.K., France, Italy, Qatar, and