{"slug": "gmo-cybersecurity-links-chinese-ai-tool-artex-to-breaches-at-japanese-firms", "title": "GMO Cybersecurity links Chinese AI tool ARTEX to breaches at Japanese firms", "summary": "Tokyo-based GMO Cybersecurity by Ierae said on October 19, 2026 that it confirmed traces of ARTEX, a Chinese-developed AI penetration-testing tool, on servers used to attack around 20 Japanese companies, nine of them in the same sector. Eight of those firms reported data breaches between September and October 2026, and GMO Cybersecurity identified six additional AI-based attack infrastructures aimed at Japanese targets across retail, education, finance and media. The finding follows CrowdStrike's late-September 2026 link of ARTEX to attacks on South Korean banks; GMO Cybersecurity shared its information with Japanese law enforcement without attributing the activity to a specific actor.", "body_md": "Photo: toter yau / Pexels\n\n# GMO Cybersecurity links Chinese AI tool ARTEX to breaches at Japanese firms\n\nA Tokyo security firm says an AI penetration-testing tool tied to South Korean bank attacks has turned up in a campaign against Japanese companies\n\nA tool built to help companies find their own weak spots appears to have found a second career. On October 19, 2026, Tokyo-based GMO Cybersecurity by Ierae said it confirmed traces of ARTEX, a Chinese-developed AI penetration-testing tool, on servers used to attack Japanese companies.\n\n## What GMO Cybersecurity found\n\nThe core finding centers on a single piece of attack infrastructure. According to GMO Cybersecurity, it targeted around 20 Japanese companies.\n\nNine of those companies operate in the same sector.\n\nEight firms reported data breaches between September and October 2026, a timeline that lines up with the activity on the infrastructure GMO Cybersecurity examined.\n\nThe research findings suggest the overlap points to coordinated efforts from a single threat group.\n\nGMO Cybersecurity identified six additional AI-based attack infrastructures aimed at Japanese targets, reaching across retail, education, finance and media.\n\n### AI, tech, and the markets they move—in one daily briefing.\n\nDaily. Free. Join 34,000+ readers across crypto, finance, and policy.\n\n## The South Korea connection\n\nThe link to South Korea runs through CrowdStrike. The US cybersecurity firm tied ARTEX to attacks on South Korean banks in late September 2026.\n\nGMO Cybersecurity’s report places the same tool on servers used against Japanese companies, with breach disclosures in Japan clustering across September and October 2026. The timing overlaps with the South Korean activity CrowdStrike flagged.\n\n## Attribution remains open\n\nGMO Cybersecurity has shared its security information with Japanese law enforcement. That information did not include specific attribution to a particular actor.\n\n## What this means for Japanese companies and beyond\n\nThe concentration of nine targets in one industry suggests attackers may be working through sector-specific weaknesses. The six additional attack infrastructures mean retailers, schools, financial firms and media organizations in Japan have a concrete signal that AI-assisted tooling is being pointed at their industries.\n\nFor the finance sector specifically, the overlap with South Korean bank attacks is worth noting. Financial institutions in Japan appear on GMO Cybersecurity’s list of targeted industries, and the same tool already has a track record against banks across the water.\n\nThe background to the campaign includes a documented exposure of approximately 894,082 records from the GMO Research & AI infoQ survey site, illustrating the scale of data at risk as unauthorized access incidents have risen sharply across Japan since September 2026.\n\n**Disclosure:** This article was edited by Diego Almada Lopez. For more information on how we create and review content, see our\n\n[Editorial Policy](https://cryptobriefing.com/editorial-policy/).", "url": "https://wpnews.pro/news/gmo-cybersecurity-links-chinese-ai-tool-artex-to-breaches-at-japanese-firms", "canonical_source": "https://cryptobriefing.com/gmo-cybersecurity-artex-ai-tool-japan-breaches/", "published_at": "2026-10-20 05:12:44+00:00", "updated_at": "2026-10-20 05:14:43.107001+00:00", "lang": "en", "topics": ["ai-safety", "artificial-intelligence", "ai-agents"], "entities": ["GMO Cybersecurity by Ierae", "ARTEX", "CrowdStrike", "Japan", "South Korea", "GMO Research & AI", "infoQ"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/gmo-cybersecurity-links-chinese-ai-tool-artex-to-breaches-at-japanese-firms", "markdown": "https://wpnews.pro/news/gmo-cybersecurity-links-chinese-ai-tool-artex-to-breaches-at-japanese-firms.md", "text": "https://wpnews.pro/news/gmo-cybersecurity-links-chinese-ai-tool-artex-to-breaches-at-japanese-firms.txt", "jsonld": "https://wpnews.pro/news/gmo-cybersecurity-links-chinese-ai-tool-artex-to-breaches-at-japanese-firms.jsonld"}}