CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets

Summary

TrendAI analyzed three exposed server environments used in cyber attacks against organizations in Japan, in which AI either drove the operation or assisted a human operator. One attack abused CyberStrikeAI, an open-source penetration testing tool, to automate reconnaissance, exploitation, command-and-control, persistence, exfiltration and reporting across 44 agents, affecting at least 19 organizations, including at least 16 in Japan, in October 2026. A second campaign, human-led with LLM assistance, targeted a GIS server with default credentials and stole cadastral and commercial records, Windows credentials and email data over 24 days in August and September 2026.

Topics

• AI agents

Related items

• HighGHSA-m65p-9j7q-6w33: MLflow vulnerable to arbitrary file read on unauthenticated servers via prompt model version sourceSimilar attack · GitHub Advisory Database
• CriticalGHSA-26p8-2jq9-3vq9: MLflow vulnerable to remote code execution on unauthenticated servers via third-party scorer deserialization importing caller-placed artifact modulesSimilar attack · GitHub Advisory Database
• MediumGHSA-w4fh-qvv9-3v23: Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource serverSimilar attack · GitHub Advisory Database
• MediumGHSA-5h93-6whr-6q8j: Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodiesSimilar attack · GitHub Advisory Database
• MediumGHSA-rwrf-2pqf-9j8j: Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemasSimilar attack · GitHub Advisory Database