Chinese AI Tool Artex Exploited in Large-Scale Cyberattacks on Japanese Firms
A Chinese AI-powered cybersecurity tool, Artex, was repurposed to target dozens of Japanese companies, potentially compromising millions of customer records, according to findings released by GMO Internet Group on October 20, 2026. The attacks, confirmed through investigations with external partners, focused almost exclusively on Japan, affecting businesses across sectors including restaurant chains and car rental operators with unauthorized access and data breaches.
Artex, developed by Autumn-27, was originally designed to enhance security by identifying vulnerabilities through AI-driven penetration testing. However, its open-source code was exploited by malicious actors, prompting the developer to shut down public access this month and transition the project to closed-source. The move followed South Korea’s earlier attribution of financial institution breaches to the tool.
GMO’s cybersecurity team identified six servers orchestrating the AI-powered attacks, each tailored to specific industries such as finance, e-commerce, and logistics. While the servers’ locations and operators remain undisclosed, GMO shared its findings with Japanese authorities to mitigate further damage. The government has since urged businesses to bolster their defenses.
The incident underscores growing concerns over AI’s dual-use potential where tools built for security can be weaponized to exploit vulnerabilities at scale. Artex’s developer condemned the misuse, stating the attacks were “totally contrary” to the project’s intended purpose.
GMO Internet Group TPRM report: https://www.rankiteo.com/company/gmointernetgroup
"id": "gmo1792484633",
"linkid": "gmointernetgroup",
"type": "Cyber Attack",
"date": "10/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Millions',
'industry': ['Hospitality',
'Automotive',
'Finance',
'E-commerce',
'Logistics'],
'location': 'Japan',
'type': 'Restaurant chains, car rental operators, '
'finance, e-commerce, logistics'}],
'attack_vector': 'Exploited AI-powered penetration testing tool',
'data_breach': {'data_exfiltration': 'Potential',
'number_of_records_exposed': 'Millions',
'personally_identifiable_information': 'Likely',
'sensitivity_of_data': 'High (personally identifiable '
'information likely)',
'type_of_data_compromised': 'Customer records'},
'date_detected': '2026-10-20',
'date_publicly_disclosed': '2026-10-20',
'description': 'A Chinese AI-powered cybersecurity tool, Artex, was '
'repurposed to target dozens of Japanese companies, '
'potentially compromising millions of customer records. The '
'attacks focused on businesses across sectors including '
'restaurant chains and car rental operators with unauthorized '
'access and data breaches.',
'impact': {'brand_reputation_impact': 'Potential reputational damage',
'data_compromised': 'Millions of customer records',
'identity_theft_risk': 'High'},
'initial_access_broker': {'entry_point': 'Repurposed AI tool (Artex)',
'high_value_targets': ['Finance',
'E-commerce',
'Logistics']},
'investigation_status': 'Ongoing',
'lessons_learned': 'AI-powered security tools can be weaponized; open-source '
'projects may pose dual-use risks.',
'motivation': 'Data exfiltration, potential financial gain',
'post_incident_analysis': {'corrective_actions': 'Artex transitioned to '
'closed-source; '
'industry-wide awareness of '
'AI tool risks.',
'root_causes': 'Exploitation of open-source AI '
'tool (Artex) for malicious '
'purposes; lack of oversight on '
'dual-use potential.'},
'recommendations': 'Transition open-source security tools to closed-source if '
'misuse is detected; enhance monitoring of AI-driven '
'attack vectors; collaborate with authorities for '
'mitigation.',
'references': [{'date_accessed': '2026-10-20', 'source': 'GMO Internet Group'},
{'source': 'Autumn-27 (Artex developer)'}],
'response': {'law_enforcement_notified': 'Japanese authorities',
'remediation_measures': 'Government urged businesses to bolster '
'defenses',
'third_party_assistance': 'GMO Internet Group (investigation '
'with external partners)'},
'stakeholder_advisories': 'Japanese government urged businesses to bolster '
'defenses.',
'title': 'Chinese AI Tool Artex Exploited in Large-Scale Cyberattacks on '
'Japanese Firms',
'type': 'Data Breach, Unauthorized Access',
'vulnerability_exploited': 'Repurposed open-source AI tool (Artex)'}