Chinese AI security tool Artex used in cyberattacks on Japanese companies, GMO says

A Chinese-developed artificial intelligence cybersecurity tool called Artex was used in recent cyberattacks against Japanese companies, according to an investigation by GMO Cybersecurity by Ierae, a subsidiary of Tokyo-based GMO Internet Group.

GMO said forensic logs confirmed the tool’s use and indicated that the attacks were directed almost exclusively at Japan. Dozens of Japanese businesses, including restaurant chains and a car rental operator, have recently reported unauthorized access or data breaches potentially affecting millions of customers.

The cybersecurity company said it identified six internet servers launching AI-powered attacks. Each server appeared to focus broadly on an industry, including finance, e-commerce or logistics. GMO did not identify the servers’ locations or their operators. It said it had shared its findings with law enforcement to help prevent further damage.

Artex was created to help organizations identify vulnerabilities through AI-powered security testing. Its developer recently restricted access to the tool’s source code after acknowledging misuse by “bad actors,” following reports linking Artex to attacks on South Korean financial institutions. The developer said malicious use was contrary to the project’s purpose and that the tool would no longer be updated.

Japan’s government has urged companies to strengthen their cyber defenses amid the recent breaches. The head of the ruling party’s cybersecurity committee this month described the emerging threat environment as a “state of emergency.”