Chinese AI tool linked to cyberattacks on Japanese and Korean banks

Hackers who infiltrated some of Japan's largest companies used the Chinese-developed AI tool ARTEX, which was also linked to recent breaches at South Korean banks, according to Tokyo-based GMO Cybersecurity by Ierae Inc. The attacks, launched from a single server infrastructure, targeted about 20 Japanese companies, including nine in the same industry, with e-commerce, finance, retail, logistics, media, education and marketing sectors among those affected.

Eight of the targeted firms have disclosed data leaks in the past two months, and the same group may be behind multiple incidents, said Daiki Fukumori, director at GMO Cybersecurity and a former Interpol investigator. The attackers appear to be running targeted, country- and industry-specific campaigns. The findings have been shared with law enforcement, and investigations are under way to determine if other countries are also being targeted.

The attacks have prompted calls from Japanese officials to strengthen cybersecurity measures. For regulated industries, the use of AI in cyberattacks raises the urgency for updated defences and cross-border cooperation. Boards and risk leaders should assess exposure to similar tools and review incident response plans.

Further disclosures from affected firms and possible regulatory guidance are likely as the investigation continues.