Cyber Strike AI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets
Summary: TrendAI analyzed three exposed server environments used in attacks on Japanese organizations, one of which used the open-source CyberStrikeAI tool to delegate work across 44 agents, generating Japanese-language fake login pages and producing validation reports on at least 19 identifiable organizations, including at least 16 in Japan, concentrated in October 2026. The other two cases involved a human operator assisted by an LLM, including an intrusion into a GIS server left on default credentials that stole cadastral and commercial records, Windows credentials, and email data over 24 days in August and September 2026, and a case where AI was limited to developing tools and scripts for campaigns against Cisco, Citrix, F5, and Yamaha edge devices.
Why it matters: At least 16 organizations in Japan received the same machine-generated validation report and evidence index from a 44-agent workflow, and Microsoft's 2026 Digital Defense Report cited here puts the median time from vulnerability discovery to weaponization below 24 hours. The operator behind the first case also targeted Taiwan and Hong Kong, and the third case's WebLogic discovery lists named organizations in the U.K., France, Italy, Qatar, and Colombia.
Read the original at The Hacker News ↗
- Topics
- Threat Actors & Nation-State
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026