--- id: "CMP-202610-chinese-speaking-crews-use-ai-agents-cyberstrikeai-44-agents" kind: "campaign" aliases: [] title: "Chinese-speaking crews use AI agents (CyberStrikeAI, 44 agents) to break into exposed legacy web systems, VPNs and WebLogic in Japan" severity: "medium" cvss: null epss: null exploited: true status: "open" category: "infrastructure" products: [{"name": "Yamaha RTX1210", "fixed": [], "affected": "devices with leaked/leftover credentials", "ecosystem": "vendor"}, {"name": "Oracle WebLogic Server", "fixed": [], "affected": "internet-exposed", "ecosystem": "vendor"}, {"name": "Cisco SD-WAN", "fixed": [], "affected": "internet-exposed", "ecosystem": "vendor"}, {"name": "Citrix NetScaler", "fixed": [], "affected": "internet-exposed", "ecosystem": "vendor"}, {"name": "F5 BIG-IP", "fixed": [], "affected": "internet-exposed", "ecosystem": "vendor"}] ecosystems: [] tags: ["campaign", "early-warning"] not_affected_if: [] published_at: "2026-10-23T00:00:00+00:00" first_seen_at: "2026-10-27T19:09:21+00:00" updated_at: "2026-10-27T19:09:21+00:00" sources: [{"source": "analyst", "url": null, "first_seen_at": "2026-10-27T19:09:21+00:00"}] --- # Chinese-speaking crews use AI agents (CyberStrikeAI, 44 agents) to break into exposed legacy web systems, VPNs and WebLogic in Japan Trend Micro reconstructed three attack infrastructures from attacker open directories, all run by Simplified-Chinese-speaking operators focused on Japan (published in Japanese 2026-10-23, in English 2026-10-27). The activity is separate from the ARTEX attacks. Case A (October 2026): the open-source CyberStrikeAI framework ran 44 AI agents that automated recon, exploitation, C2, persistence and exfiltration against at least 19 organisations (16 in Japan, also Taiwan and Hong Kong). The targets were legacy web systems at smaller businesses and local public bodies, and traffic per target was throttled to avoid notice. The deepest intrusion started at an unauthenticated, internet-exposed admin interface. Case B (Aug-Sep 2026): a human-led crew used an LLM for planning and tools. It scanned 6,000+ Japanese IPs, fully compromised legacy web systems (FTP, DB, web shell, SSH, backdoors restored after cleanup), stole data from a GIS server with default credentials, and tried to hijack exposed AI/GPU inference services. Case C (Jan-Oct 2026): a crew targeted exposed VPN and edge devices (Cisco SD-WAN, Citrix NetScaler, F5 BIG-IP) and 1,300+ Oracle WebLogic servers. It logged into Yamaha RTX1210 routers using credentials left in obtained config files. No new vulnerability was involved. Organisations with internet-exposed legacy admin panels, default or leftover credentials, or edge devices, especially in Japan, South Korea and Taiwan, are at risk. Victim names and IOCs were not published. _Summary, check and fix written by a model from the sources; labelled as such._ ## Affected - vendor:Yamaha RTX1210 affected devices with leaked/leftover credentials fixed ? - vendor:Oracle WebLogic Server affected internet-exposed fixed ? - vendor:Cisco SD-WAN affected internet-exposed fixed ? - vendor:Citrix NetScaler affected internet-exposed fixed ? - vendor:F5 BIG-IP affected internet-exposed fixed ? ## How to check - Inventory internet-exposed admin interfaces on legacy web systems and check whether any of them need no login. - Check for default credentials on GIS servers and other exposed apps, and on internally run AI inference, workflow or GPU services. - On Yamaha RTX1210 and other VPN routers: look for VPN logins from unknown sources, and check whether credentials have ever been stored in exported or backed-up config files. - Check that exposed Oracle WebLogic, Cisco SD-WAN, Citrix NetScaler and F5 BIG-IP are on current patches, and review their management-interface exposure. - Look for low-and-slow scanning spread over long periods, and for web shells or backdoors that reappear after cleanup. - Specific IOCs: unknown (Trend Micro did not publish them in the overview). ## Fix - Take legacy admin interfaces off the internet or put authentication in front of them. Remove default credentials. - Rotate VPN and router credentials, especially on Yamaha RTX1210, that may have appeared in config files or backups. - Patch exposed edge devices and WebLogic, and restrict access to their management interfaces. - Add AI, inference and GPU services to the asset inventory and require authentication on them. - After cleaning a web compromise, hunt for re-planted backdoors and rotate all credentials on the host. ## Timeline - 2026-10-27T19:09:21+00:00 analyst ## Documents - [describes] @TheHackersNews: 🚨 44 AI agents coordinating cyberattacks. CyberStrikeAI is being used to automa https://x.com/TheHackersNews/status/2115148396969488395 - [describes] Not Only ARTEX: The Different Levels AI is Used in Attacks Targeting Japan (Trend Micro / TrendAI) https://www.trendaisecurity.com/en/resources-insights/deep-research/not-only-artex-the-different-levels-ai-is-used-in-attacks-targeting-japan --- _Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_