Japan-led probe finds 1,000 servers likely used for AI-driven cyberattacks

Around 1,000 servers used for advanced artificial intelligence-driven cyberattacks have been active since October, according to a Japanese-led international investigation. The Japan Computer Emergency Response Team Coordination Center, in collaboration with international cybersecurity firms, discovered the servers, which may have utilized AI to identify vulnerabilities and target websites across the globe.

The emergence of high-level AI has made hacking more accessible, as previously time-consuming tasks have become easier with AI assistance. The investigation identified AI tools on the servers, which were primarily used for penetration testing and searching for system vulnerabilities. Some servers even contained traces of AI-generated programming support tools, suggesting that attackers had weaponized AI to bolster their hacking capabilities.

The servers could be physically housed in facilities or operated virtually. JPCERT/CC has tracked 600 to 700 of the suspect servers, with most hosting AI-powered platforms like the penetration-testing tool Artex. The center warns that as AI is still being used in the early stages for cyberattacks, more sophisticated attacks are expected in the future.