"CyberStrikeAI" tool coordinates 44 AI agents in automated attacks on targets in Japan
Trend Micro researchers revealed that attackers have repurposed CyberStrikeAI, an open-source penetration testing tool, into a platform that coordinates 44 AI agents to run an entire attack chain automatically, from reconnaissance and vulnerability validation through exploitation, persistence and report generation. Within a short window in October, at least 19 organizations were identified as validation targets, 16 of them in Japan, with the platform even generating fake Japanese-language forms and login pages to appear more convincing. The same operator had previously targeted organizations in Taiwan and Hong Kong, and the tool had earlier been used against Fortinet FortiGate devices, though the report does not describe confirmed data theft from this specific campaign. For a business, the case shows how quickly an open penetration-testing tool can be turned into a platform for mass, nearly fully automated attacks against many targets at once.
Sources
This summary was written automatically with AI from the public sources listed above and checked by an independent AI reviewer before publication. For full details, read the original source.