Attackers Used 44 AI Agents in CyberStrikeAI Campaign Against Japan

Attackers used CyberStrikeAI, an open-source penetration testing tool, to split an attack on Japanese organizations across 44 AI agents, according to The Hacker News. Researchers from TrendAI examined exposed servers containing attack tools, target lists, scripts, logs and results from three separate operations.

The CyberStrikeAI operation automated reconnaissance, vulnerability testing, exploitation, command and control, persistence, data theft and reporting. It also generated Japanese language forms and fake login pages. At least 19 identifiable organizations faced validation activity during October 2026, including at least 16 in Japan.

The other two operations used AI in more limited roles. One human led campaign used a large language model for planning and tool creation, while another used AI to develop scripts for attacks on edge devices and WebLogic servers. Trend Micro found no evidence that the three operations shared an operator.