GMOサイバーセキュリティ announced that the autonomous AI tool ARTEX was used in the source infrastructure of cyberattacks targeting Japanese companies. Approximately 20 companies were targeted, and a total of 6 attack hosts were identified.
GMOサイバーセキュリティ byイエラエ announced on 19 October that its investigation into the source infrastructure of cyberattacks targeting Japanese companies had confirmed the use of ARTEX, an autonomous AI-powered penetration testing system. Approximately 20 Japanese companies were targeted, and 6 instances of similar AI-enabled attack infrastructure were also identified.
ARTEX is reportedly an AI penetration-testing tool developed in China and has reportedly been used in attacks targeting major South Korean banks and other organizations. The investigation was disclosed on the official blog of the company’s GMO Cybercrime Countermeasures Center. Within the scope that could be observed, the source infrastructure targeted almost exclusively Japan. The websites of 9 of the target companies were in the same industry.
The investigation also identified 6 other instances of AI-enabled attack infrastructure targeting only Japanese companies. The main target industries differed by infrastructure. There were 8 companies that issued information-breach disclosures in September-October 2026, indicating the possibility that multiple incidents involved the same attack group. This information was shared with law enforcement authorities.
Regarding the frequent unauthorized-access incidents affecting Japanese companies, Gartner Japan has issued an urgent recommendation. GMO said it will continue investigating whether countries other than Japan and South Korea were also targeted and will disclose its findings on its blog if any are identified.