What happened
Japanese organizations across finance, retail, and government sectors are experiencing a surge in cyberattacks attributed to the use of AI tools. Specifically, the AI tool Artex was identified in breaches affecting GMO Internet Group and other entities, leading to data leaks and service disruptions.
According to Times Now, citing Channel News Asia and findings by GMO Cybersecurity by Ierae, a Chinese-developed AI tool called Artex was used in a series of cyberattacks targeting Japanese organizations. The security firm identified six internet servers launching these AI-powered attacks, which were organized by target industries such as finance, e-commerce, and logistics.
One of the most significant incidents involved GMO Internet Group, whose Onamae.com Desktop Cloud service for automated forex trading was compromised. The company detected malicious software on October 20 and shut down the service, with up to 26,739 server environments potentially affected. Attackers demanded $50 million in cryptocurrency, a demand GMO rejected, leading to a police investigation.
The attacks also targeted government infrastructure, including the website of the Electricity and Gas Transaction Surveillance Commission under the Ministry of Economy, Trade and Industry (METI). Additionally, several Japanese electricity companies temporarily suspended online services following the disclosure of vulnerabilities in the PHP programming language, though no confirmed data leaks were initially reported for these specific entities.
The scale of the crisis is highlighted by the Japan National Police Agency reporting that personal information of approximately 125,000 police officers and staff across 20 prefectural forces may have been compromised via a cloud service provider. Reuters reported that Japan recorded 723 cybersecurity incidents by October 20, exceeding the full-year totals for 2024 and 2025.
Source details: timesnownews.com
Why it matters
This incident marks a significant escalation in the operationalization of AI for offensive cyber operations, moving beyond theoretical risks to active, large-scale exploitation. The identification of a specific tool, Artex, used to automate vulnerability discovery and intrusion, demonstrates how AI lowers the barrier to entry for sophisticated attacks. For Japan, a critical hub for global finance and technology, this poses immediate economic and national security risks. The government's declaration of a 'state of emergency in cyber space' and the activation of active cyber defense frameworks signal a shift from passive defense to pre-emptive countermeasures. This event serves as a critical case study for the global community, highlighting the urgent need for robust security protocols against AI-enhanced threats and the potential for AI to accelerate the pace and scale of cybercrime.
The use of Artex represents a practical application of AI in offensive cybersecurity, automating the identification of vulnerabilities and execution of breaches. This reduces the time and cost required for attacks, making them more frequent and harder to defend against using traditional methods.
The incident has prompted the Japanese government to prepare emergency measures and utilize its active cyber defense framework, which allows for pre-emptive action against malicious servers. This marks a significant policy shift in how Japan approaches national cybersecurity in the age of AI.
The economic impact is substantial, with affected companies facing compensation costs and service disruptions. The potential exposure of sensitive financial and personal data poses long-term risks to consumer trust and market stability in Japan's digital economy.
This event underscores the global nature of AI-driven cyber threats, as South Korean authorities have also linked Artex to attacks on financial institutions. It highlights the need for international cooperation and shared intelligence to combat AI-enhanced cybercrime effectively.
Interactive Mechanism: How It Actually Works
Explore the underlying technology behind this development interactively.
crm_get_transaction(id='4092').Why can ethical evaluation not be reduced to one model score?
What to watch next
Monitor the Japanese government's implementation of active cyber defense measures and any international diplomatic responses regarding the use of the Artex tool. Watch for further disclosures from affected companies regarding the extent of data breaches and the specific capabilities of the AI tool used. Additionally, observe if other nations report similar attacks using the same tool, indicating a broader coordinated campaign.
Investigate the specific technical capabilities of the Artex tool and whether it is widely available or restricted, which could influence the scale of future attacks.
Monitor the Japanese government's public communications regarding the active cyber defense framework and any specific actions taken against the identified malicious servers.
Track the legal and regulatory responses in Japan and other countries to AI-driven cyberattacks, including potential new laws or guidelines for AI use in cybersecurity.
Observe if other major economies report similar incidents involving the Artex tool, which could indicate a coordinated international campaign or the widespread adoption of this AI tool by threat actors.