Chinese AI tool linked to hacks in Japan – tracking attribution and response

What happened

Prime Minister Sanae Takaichi designated the National Cybersecurity Office as the central command center to strengthen national defenses on October 23, 2026 1. This administrative shift follows a formal proposal from Masaaki Taira, head of the Liberal Democratic Party’s (LDP) Headquarters for National Cybersecurity Strategy, who characterized the current volume of data breaches as a matter of urgent public concern 1. Takaichi stated the government will now develop a new framework to accelerate defensive measures across all relevant ministries and agencies 1. The move responds to a series of large-scale personal data breaches that Takaichi described as increasing in both scale and sophistication 1. While the Prime Minister’s office coordinates this new command structure, the LDP proposal specifically called for a dedicated headquarters to manage the response to these cyberattacks 1.

Why it matters

The centralization of cybersecurity under the Prime Minister’s office establishes a new legal and operational hierarchy for Japanese digital defense 1. By elevating the National Cybersecurity Office to a command center, the government aims to unify the response of disparate ministries that have previously managed infrastructure security in silos 1. For the private sector, this shift signals a transition from voluntary compliance to a state-led defensive posture, as Takaichi noted that the scale of recent threats has reached a level requiring direct leadership from the prime minister’s office 1. The political urgency cited by Taira suggests that the government is prioritizing the restoration of public confidence following the breach of personal data across multiple sectors 1. The effectiveness of this command center will be measured by its ability to integrate the "necessary framework" Takaichi promised to develop, which will dictate how future AI-driven incidents are reported and mitigated 1.

What's next

The government is scheduled to begin the development of the new cybersecurity framework immediately under the leadership of the Prime Minister's office 1. A formal announcement detailing the specific authorities and budget of the new National Cybersecurity Office command center would clarify the extent of its oversight over private infrastructure providers. The LDP's proposal for a dedicated headquarters remains under review; a cabinet decision to adopt this specific structure would settle whether the response remains within existing offices or moves to a new agency 1. Future diplomatic coordination may be informed by the Trilateral Cyber Dialogue framework, which previously established channels between Japan, China, and South Korea for discussing cyber strategies and capacity building 2. A statement from the National Cybersecurity Office regarding new mandatory reporting requirements for AI-driven breaches would confirm the first operational phase of the new command structure.

What happened

Microsoft attributed a global cyber campaign involving the agentic AI framework ARTEX to the China-aligned threat actor Storm-0940 on October 21, 2026 57. The actor used the Go-based framework to automate scanning, reconnaissance, and password spraying against hundreds of organizations across sectors including aerospace, defense, and semiconductors 67. Between October 10 and 14, 2026, Storm-0940 infrastructure conducted an automated cross-tenant password-spray campaign targeting 327 accounts, peaking at 2,900 failed sign-in attempts per minute on October 11 6.

On October 15, 2026, the actor gained access to the identities of multiple ConnectWise cloud applications 6. Storm-0940 used these stolen credentials to authenticate to customer Microsoft 365 environments without requiring interactive user sign-ins, bypassing multi-factor authentication by acting as the trusted service principal 56. ConnectWise shut down its Cloud Backup service on October 17, 2026, after identifying unauthorized access to application identities 5. Microsoft reported that in several instances, the time from initial targeting to obtaining privileged cloud access was less than three hours 7.

The ARTEX framework, developed by a Chinese cybersecurity engineer, was converted to closed-source on October 8, 2026, following reports of its abuse in attacks against South Korean financial institutions 8. The developer stated the tool was originally intended for authorized security risk testing and research 8. Zscaler researchers documented that the framework has been used to coordinate multiple AI models, including DeepSeek and GLM, to automate tasks from reconnaissance to data exfiltration 9.

Why it matters

The use of agentic AI allows threat actors to operate at "machine speed," attempting multiple breach paths simultaneously and working without the constraints of human schedules 78. This automation significantly reduces the window for defenders to detect and respond to intrusions 6. In the ConnectWise incident, attackers targeted more than 2,250 tenants, with at least 162 to 173 tenants confirmed as compromised 59.

The campaign highlights a shift toward automated supply chain compromises through the abuse of OAuth applications and service principals 17. Because the attackers authenticated as the application itself using stolen secrets, they inherited permissions previously granted by customers, such as the ability to read mail and files for backup purposes 5. Huntress observed the actor using these identities to assign directory roles, including Exchange Administrator and Global Administrator, to establish persistent access 5. While Microsoft identified follow-on activity including reconnaissance and credential changes, the company stated that successful authentication does not necessarily indicate that customer data was exfiltrated 79.

What's next

ConnectWise has disabled seven application identities covering Cloud Backup and integrations for Teams, Exchange Online, and Microsoft Graph 5. The company recommends that affected connections remain disabled until formal restoration guidance is issued 9.

Security teams are advised to review service principal sign-ins and investigate unexpected changes to application credentials or privileges 7. Microsoft recommends preserving evidence before deleting applications, as attackers may have added credentials to other authorized integrations to maintain access after the primary connection is severed 9. A statement from the Japanese National Center of Incident Readiness and Strategy (NISC) or the Ministry of Internal Affairs and Communications would clarify if domestic critical infrastructure was among the hundreds of organizations targeted by Storm-0940 during this campaign.