ARTEX Intel中文

Timeline

GMO: about 20 Japanese companies targeted from ARTEX infrastructure

Event date2026-09-18 to 2026-10-18
Disclosed2026-10-19
TypeUnauthorized access (targets)
ConfidenceConfirmed
ARTEX statusConfirmed use of ARTEX
Countries and regionsJapan
SectorsMultiple sectors

GMO confirmed ARTEX on the attack-source infrastructure, which targeted about 20 Japanese companies. GMO assesses that targets were selected by country and industry. The intelligence was handed to law enforcement.

Targets

  • About 20 Japanese companies (not named, 9 of them in the same industry)
  • 8 of the targets have publicly disclosed leaks (not individually confirmed as caused by ARTEX)

Attribution

ARTEX basis
GMO confirmed use of ARTEX on the attack-source infrastructure. For another 6 attack infrastructure servers, the GMO blog says only that AI was used. Yomiuri says ARTEX was found on all of them.
Actor
GMO: the same attack group (not named).
Same attacker?
GMO infers that the methods are the same, but does not say it is the same attacker as in the Korean case.

Figures and definitions

TargetsAbout 20 companies (GMO blog); about 80 (Yomiuri and NHK-affiliated reports, not in the GMO blog, basis unexplained)
Time windowSep 18 to Oct 18 appears only in Yomiuri-affiliated reports, not in the GMO blog
Attack infrastructure1 server with confirmed ARTEX; another 6 servers

Related events

Sources (13)