Attackers used AI pentesting tool ARTEX against about 20 Japanese companies, GMO says
Japanese security firm GMO Cybersecurity by Ierae said attackers used the AI autonomous penetration-testing tool ARTEX against roughly 20 Japanese companies, nine of them in the same industry, according to a report by iThome. Eight of the targeted companies disclosed data breaches between September and October, and GMO said it has given its investigation findings to law enforcement and is continuing to trace affected organizations in other countries. Researchers also identified six hosts using AI technology to conduct attacks against the retail, finance, e-commerce, media and logistics sectors, and CrowdStrike had previously found attacks involving ARTEX against South Korean financial institutions.
The report describes an AI autonomous penetration-testing tool being used in an intrusion campaign against real companies, which GMO has reported to law enforcement and is still investigating across other countries.
From the digest “【資安日報】10月21日，Google Cloud倫敦區域服務中斷近8小時，波及多家英國銀行與…”
日本企業接連遭駭，GMO確認攻擊者使用AI滲透測試工具ARTEX
日本近期接連傳出企業遭網路攻擊及資料外洩事件，日本資安業者GMO Cybersecurity by Ierae調查發現，攻擊者使用AI自主滲透測試工具ARTEX，鎖定約20家日本企業，其中9家屬於同一產業。研究人員另發現6臺使用AI技術發動攻擊的主機，分別針對零售、金融、電商、媒體及物流等產業。CrowdStrike先前也發現韓國金融機構遭遇涉及ARTEX的攻擊。GMO指出，遭鎖定的日本企業中，有8家於9至10月間公告資料外洩事件，已將調查資訊提供執法機關，並持續追查其他國家的受影響情況。詳全文