GMO unit says China-developed AI tool ARTEX was used in cyberattacks on Japanese firms
In short
GMO Cybersecurity by Ierae, a subsidiary of GMO Internet Group, said it confirmed that an AI tool called ARTEX, developed by a Chinese engineer, was used in unauthorized access against Japanese companies. Nippon TV reported that the source targeted about 20 Japanese companies, and that eight of the companies the unit confirmed as targets have disclosed data leaks since September.
Read the full story 1 min read
GMO Cybersecurity by Ierae, a security company in the GMO Internet Group based in Shibuya, Tokyo, announced in a blog post on the 19th that it had confirmed an AI software called ARTEX was used in unauthorized access cases in Japan, Nikkei reported. NHK quoted a company representative as saying the investigation confirmed that China-linked AI had been used in some of the unauthorized access cases occurring one after another in Japan. [ 1 , 2 ]
Nikkei says ARTEX was developed by a Chinese engineer. Sankei describes it as an AI agent that works autonomously once it is given instructions, and says it is regarded as highly capable at probing systems for vulnerabilities. Sankei links the finding to the wave of personal-data leaks from cyberattacks in Japan. [ 1 , 4 ]
Nippon TV reported that, according to the GMO unit's findings, the attack source abused AI developed in China and was carrying out attacks while narrowing its targets by country and industry. The source targeted about 20 Japanese companies, in sectors including insurance and finance, digital gifts, retail and distribution, and e-commerce, media and logistics. In a separate investigation, the unit said it found six devices used for cyberattacks aimed only at Japanese companies. [ 7 ]
Of the companies the GMO subsidiary confirmed as targets, eight have announced data leaks since September. The subsidiary said multiple victims had resulted from the actions of the same group. [ 7 ]
Nikkei and Sankei both say ARTEX has been tied to cyberattacks on South Korean financial institutions. Sankei reported that another security company's investigation found traces of the tool in unauthorized access to multiple South Korean financial institutions that began at the end of September. Nikkei says that this appears to be the first time its use in an attack aimed at Japan has come to light. [ 1 , 4 ]
Why it matters
The outlets link the findings to a run of data leaks at Japanese companies, and the unit's view is that one group is behind multiple cases. Nikkei says this appears to be the first time the software's use in attacks aimed at Japan has come to light.
Key facts
- GMO Cybersecurity by Ierae, a GMO Internet Group company based in Shibuya, Tokyo, said on the 19th in a blog post that it had confirmed the AI software ARTEX was used in unauthorized access cases in Japan. [ 1 ]
- Nikkei says ARTEX was developed by a Chinese engineer. [ 1 ]
- Sankei describes ARTEX as an AI agent that works autonomously once given instructions. [ 4 ]
- Nippon TV reported that the attack source targeted about 20 Japanese companies. [ 7 ]
- Eight of the companies the GMO subsidiary confirmed as targets have announced data leaks since September, and the subsidiary said multiple victims resulted from the same group's actions. [ 7 ]
- Nippon TV reported that a separate investigation found six devices used for cyberattacks aimed only at Japanese companies. [ 7 ]
- Sankei reported that traces of ARTEX were also found, in another security firm's investigation, in unauthorized access to multiple South Korean financial institutions that began at the end of September. [ 4 ]
Confirmed by several sources
Still unclear
- Whether ARTEX use in an attack on Japan is the first such case. Nikkei says it appears to be the first, using hedged wording; no other outlet addresses this.
- The number of targeted companies and the six attack devices. Only Nippon TV gives the figure of about 20 companies and the six devices.
- Who is behind the attacks. The documents say the GMO unit sees one group behind multiple cases but do not identify it.