CyberStrikeAI’s 44 agents automated attacks on Japan organizations
Original title: CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets
Other listed targets included Taiwan, Hong Kong, the UK, France, Italy, Qatar, and Colombia.
TrendAI reviewed three attacker servers aimed at Japan. In October 2026, CyberStrikeAI’s 44 agents automated attacks; at least 19 organizations, including 16 in Japan, had structured validation reports. A separate 24-day campaign in August and September used a large language model and stole cadastral records, Windows credentials, and email from a GIS server with default credentials. From January to October, a third operator used AI mainly to write tools while scanning Cisco, Citrix, F5, Yamaha, and WebLogic systems. Researchers found no shared operator.
Unconfirmed: Models used are unknown, and researchers say there is no evidence the three cases share an operator.
- The first case also generated Japanese forms and fake login pages.
- The second campaign sought low-cost access to AI inference services.
- The third operator ran at least six campaigns from January to October 2026.
- Microsoft says median flaw-to-weaponization time is now under 24 hours.
Impact: Cadastral records, Windows credentials, and email data stolen.
| Product | Affected |
|---|---|
| Cisco edge devices | — |
| Citrix edge devices | — |
| F5 edge devices | — |
| Yamaha edge devices | — |
| Oracle WebLogic | — |
- ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid AccountsT1041 Exfiltration Over C2 ChannelT1566 Phishing
- Organizations
- Trend MicroMicrosoft
From the original article
8 min read at thehackernews.com
Cybersecurity researchers have disclosed details of three cyber attacks targeting organizations in Japan in which artificial intelligence (AI) was a key element, either in the driving seat or to assist a human operator. TrendAI, which analyzed three exposed server environments used by threat actors to conduct the malicious cyber operations, described them as distinct from previously published
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.