Latest
  1. Ireland’s government will not oppose Labour bill on AI sexual abuse images
  2. METR estimates Anthropic’s capabilities now improve at about twice its 2024 to 2025 pace
  3. Anthropic rolls out Personal Finance beta in Claude, with read-only bank access
  4. Baidu releases ERNIE-5.5-Flash-Base pre-training checkpoint on Hugging Face
  5. Parents sue Google, saying Gemini on a school Chromebook helped their daughter plan suicide
  6. Visa benchmark finds AI shopping agents fail 42.8% of runs
  7. OpenAI releases GPT-6 Cyber for approved security customers
  8. Google releases Gemini Omni 1.2 Flash with 15-second video clips

Latest / Media, elections and online safety

IncidentMediaFrontierJapanConfirmed

TrendAI finds three more AI-assisted attack servers aimed at Japan

See how this story connects

Source: TrendAIAlso reported by The Hacker News

TrendAI, Trend Micro’s enterprise security unit, analysed three attack servers that Simplified-Chinese-speaking operators left open, separate from the hosts that ran ARTEX. On one, the open-source tool CyberStrikeAI split the whole attack among 44 agents, from reconnaissance to exfiltration and reports, ran validation against at least 19 organisations, 16 of them in Japan, and wrote Japanese forms and fake login pages. A second, human-led with AI-written tools, scanned at least 6,000 Japanese IP addresses over about 24 days and went after exposed AI and GPU servers; a third used AI only to write tools against VPN devices and WebLogic servers. TrendAI found no sign that the three share an operator.

Why it matters

Japan’s breach wave has several AI attack tools behind it, and TrendAI says they still get in through exposed, unpatched systems, so defenders’ priorities stay the same.

When
23 Oct 2026
ID
WTA-N-2026-0453
Where
Japan
Who
TrendAI, Trend Micro
System
CyberStrikeAI (44 agents) and AI-written attack tools
Operator
three Simplified-Chinese-speaking operators, no sign of a shared one
Type
AI-driven and AI-assisted intrusions against Japanese organisations (at least 19 organisations validated by one platform)
Status
disclosed; disclosed by TrendAI · Incident ledger

Summary written with AI by wheresthe.ai, from TrendAI and the reporting credited above. Checked against the source on 27 Oct 2026.

Read the original at TrendAI

Source copy: saved on 27 Oct 2026 to check this story and not republished, because the text belongs to its publisher. Also held by the Internet Archive.

Next stop on this Storyline: Elsewhere: ChinaVolta-Autodoxer infostealer uses AI models to profile and rank victims

Cite this story

WTA-N-2026-0453: “TrendAI finds three more AI-assisted attack servers aimed at Japan.” wheresthe.ai, 23 Oct 2026. https://wheresthe.ai/d/jp-trendai-three-ai-attack-servers-targeting-japan-2026-10/ (source: TrendAI).

Spotted an error? Email [email protected].