TrendAI: 44 AI agents probed 19 organizations, 16 of them in Japan
A 44-agent CyberStrikeAI workflow ran against legacy web systems at smaller Japanese businesses and local public bodies.
· TrendAI · Research by Bakuei Matsukawa, Joseph C Chen
TrendAI rebuilt three attack infrastructures aimed at Japan from files the operators left in open server directories. One ran CyberStrikeAI, an open-source AI pentest tool, with 44 agents sharing the work across at least 19 organizations.
01What happened
TrendAI published this analysis of three attacker infrastructures in Japanese on 23 October 2026, with an English edition following on 27 October. Bakuei Matsukawa and Joseph C Chen rebuilt each operation from files the attackers had left in publicly reachable server directories. All three were active during 2026 and concentrated on Japan, and TrendAI says they are distinct from the infrastructures covered in earlier ARTEX reporting.
02How it works
CyberStrikeAI, an open-source penetration-testing tool built on AI agents, drove one of the three operations end to end as a single repeatable workflow: reconnaissance, vulnerability discovery and validation, exploitation, command and control, persistence, data exfiltration and automated reporting. Log entries such as 'credential-search agent 8/44' record 44 agents splitting the work, and the exposed management console used Simplified Chinese. The clearest intrusion chain began at an unauthenticated, publicly reachable administration page on a legacy web system, and TrendAI states that no novel vulnerability was involved. The platform throttled traffic to each target, which kept the activity faint in any single organization's logs.
03Who is affected
Targets were legacy web systems at smaller businesses and local public-sector organizations: at least 19 of them, at least 16 in Japan, with others in Taiwan and Hong Kong. Deep compromise reached a very small share, and for many targets the platform itself logged no session, no web shell and no exfiltration. TrendAI describes every figure as a lower bound.
04What to do
Inventory public-facing web systems, update or isolate legacy platforms, and check for externally exposed administration interfaces and default credentials. TrendAI also advises designing monitoring that can detect low-frequency, distributed attempts, because a single anomaly in one organization's logs may not be enough to judge the activity.
Sources 2 links, all fetched
- 1trendaisecurity.comTrendAI Report
- 2microsoft.comMicrosoft On ARTEX