# CyberStrikeAI Agent Platform Abused to Automate Scanning, Exploitation, and Data Theft Against Japanese Organizations

> TrendAI researchers report an unidentified actor using the open-source CyberStrikeAI penetration-testing platform to coordinate 44 AI agents across reconnaissance, vulnerability discovery, exploitation, persistence, and exfiltration. At least 19 organizations were scanned, 16 of them in Japan; no confirmed breaches were reported.

- **Published:** 2026-10-28T10:01:39Z
- **Last reviewed:** 2026-10-28T10:01:39Z
- **Canonical:** https://intel.threadlinqs.com/threat/TL-2026-4632
- **ID:** TL-2026-4632
- **Severity:** HIGH
- **Category:** THREAT_INTEL
- **Status:** ACTIVE
- **Detections:** 9 · **IOCs:** 10 (full data via the Threadlinqs MCP server — Purple tier)

## Description

TrendAI researchers Bakuei Matsukawa and Joseph C Chen reported on 2026-10-27 an October 2026 campaign in which an unidentified operator used CyberStrikeAI, an open-source, Go-based, AI-native security testing platform published on GitHub by the alias Ed1s0nZ, to orchestrate 44 specialized AI agents. The agents covered reconnaissance, vulnerability discovery, validation, exploitation, command and control, persistence, exfiltration, and reporting, and were managed through a dashboard that tracked execution success rates and token usage.

The researchers reached open directories on operator infrastructure that held scripts, target lists, logs, command histories, and attack results. They had no victim-side data. At least 19 organizations were scanned, 16 of them in Japan. Many of the recovered reports explicitly showed 'no session, no web shell, no exfiltration', so deep compromise affected only a fraction of the scanned organizations and no confirmed breaches were reported. Reported TTPs include targeting unauthenticated administration interfaces on legacy web systems, validating vulnerabilities, deploying web shells, establishing credentials for persistence, automated data theft, and low-frequency attempts distributed across many targets to evade detection. The campaign was also reported to use Japanese-language phishing content and fake login pages.

Attribution is unresolved. Simplified Chinese was used across the operator environments, but TrendAI notes that language alone does not establish location, and the activity is not confirmed as state-backed. No CVEs were cited, and the researchers withheld IPs, domains, and hashes pending investigations.

CyberStrikeAI itself (Apache 2.0, Go, 100+ YAML-defined tools, native MCP support, single- and multi-agent modes, built-in WebShell and C2 features, default port 8080 with a self-signed HTTPS web UI, SQLite storage) was earlier documented by Team Cymru as running on 21 unique IPs between 2026-01-20 and 2026-02-26 in connection with a FortiGate-targeting campaign, and ThreatBook reportedly acquired the project in October 2026. Japanese authorities and JPCERT/CC have reportedly confirmed signs of AI agents being used in attacks on Japanese companies during 2026. Severity HIGH is analyst-assigned (no CVSS). This record is based on secondary reporting because the primary TrendAI report was not retrievable.

## MITRE ATT&CK

- T1588.002 Obtain Capabilities: Tool
- T1595.002 Active Scanning: Vulnerability Scanning
- T1598 Phishing for Information
- T1190 Exploit Public-Facing Application
- T1566.002 Phishing: Spearphishing Link
- T1059 Command and Scripting Interpreter
- T1505.003 Server Software Component: Web Shell
- T1078.001 Valid Accounts: Default Accounts

## Sources

- [Hackers Use CyberStrikeAI Agents to Automate Network Scanning, Exploitation, and Data Theft](https://cybersecuritynews.com/hackers-use-cyberstrikeai-agents/)
- [Chinese AI Tool Likely Used in Cyberattacks on Japan Firms](https://www.nippon.com/en/news/yjj2026102000795/)
- [Open-Source CyberStrikeAI Deployed in AI-Driven FortiGate Attacks](https://thehackernews.com/2026/03/open-source-cyberstrikeai-deployed-in.html)
- [Tracking CyberStrikeAI Usage (Team Cymru)](https://www.team-cymru.com/post/tracking-cyberstrikeai-usage)
- [CyberStrikeAI tool adopted by hackers for AI-powered attacks](https://www.bleepingcomputer.com/news/security/cyberstrikeai-tool-adopted-by-hackers-for-ai-powered-attacks/)
- [CyberStrikeAI (Ed1s0nZ) GitHub repository](https://github.com/cybersecua/CyberStrikeAI)
- [ThreatBook acquires CyberStrikeAI security testing platform](https://technode.global/2026/10/01/threatbook-acquires-cyberstrikeai-security-testing-platform/)
- [TrendAI Research Reinforces Japan's Urgent Cybersecurity Warning as Incidents Surge in 2026](https://www.webull.com/news/15738685462160384)

## Full data

Detection queries (Splunk SPL / Microsoft KQL / Sigma) and IOC values require the Threadlinqs MCP server (Purple tier): https://intel.threadlinqs.com/mcp

Canonical: https://intel.threadlinqs.com/threat/TL-2026-4632