Trend Micro's research arm TrendAI published on 27 October the English edition (Japanese edition 23 October) of an analysis that separates AI-assisted attack infrastructure targeting Japan into three strands. In the strand that ran the open-source agentic penetration-testing tool CyberStrikeAI with 44 agents, automating reconnaissance through intrusion, exfiltration and reporting, at least 19 organisations were probed in a short burst in October, at least 16 of them Japanese small businesses and local public bodies; Japanese-language fake login pages were generated, and the deepest intrusion began at an unauthenticated admin interface on a legacy system. The authors caution that the operators are unknown, that the Simplified Chinese console is a weak indicator, and that the findings are no proof of a new state-backed campaign.
From developments to evidence and analysis
Background
No explicit relationship is recorded.
Evidence
No explicit relationship is recorded.
Follow-ups / later versions
No explicit relationship is recorded.
Related questions
Cite this article
AI & Security Observatory(2026-10-27)「TrendAI、日本を標的とするAI利用の攻撃基盤を3系統に分類 44エージェント構成で中小企業・自治体を探索」『AI & Security Observatory』、第1.0版、最終更新2026-10-29。https://ai-security-observatory.org/ja/brief/brief-20261029-10/
AI & Security Observatory (2026-10-27). TrendAI maps three AI-assisted attack infrastructures targeting Japan, including a 44-agent CyberStrikeAI deployment probing small firms and municipalities . AI & Security Observatory, version 1.0. Updated 2026-10-29. https://ai-security-observatory.org/en/brief/brief-20261029-10/
Version 1.0 · Publication date 27 Oct 2026 · Updated 29 Oct 2026
Revision history
- Earlier revisions have not been recorded.