Security News
Tokyo police are investigating cyberattacks on about 200 Japanese companies and research organizations, including the country's space agency, by a hacking group believed to be linked to the Chinese military, the government said Tuesday. A suspect in the JAXA case, a Chinese systems engineer based in Japan, allegedly gained access to a rental server by registering himself under a false identity to launch the cyberattacks, Kato said, citing the police investigation.
Cybersecurity researchers on Tuesday disclosed details of a sophisticated campaign that deploys malicious backdoors for the purpose of exfiltrating information from a number of industry sectors located in Japan. Dubbed "A41APT" by Kaspersky researchers, the findings delve into a new slew of attacks undertaken by APT10 using previously undocumented malware to deliver as many as three payloads such as SodaMaster, P8RAT, and FYAnti.
The first "Quad summit" of leaders from Australia, India, Japan, and the USA has announced the group will create a "Critical and Emerging Technology Working Group". The joint "Spirit of the Quad" statment said the group will: "Respond to the economic and health impacts of COVID-19, combat climate change, and address shared challenges, including in cyber space, critical technologies, counterterrorism, quality infrastructure investment, and humanitarian-assistance and disaster-relief as well as maritime domains."
Japan and Cisco announced a collaboration framework through Cisco's Country Digital Acceleration Program to drive mass-scale digitization across Japan in support of its Society 5.0 vision and towards an inclusive recovery from the global COVID-19 pandemic. The program in Japan was unveiled at virtual event attended by Guy Diedrich, Vice President and Global Innovation Officer at Cisco, and Ichiro Nakagawa, Vice President and Head of Japan at Cisco, Wayoh Suzuki, Chairman, Cisco Japan, with remarks via video from Takuya Hirai, Japan's Minister of State for Digital Transformation, the Minister of State for the Social Security and Tax Number System and Minister in charge of Information Technology Policy.
In practice few who install such systems add such capabilities as IP address detection white lists, or if they do make them too broad for various non technical reasons. Further the use of a secure rolling time credential token or other non time static credential would have twarted such an attack.
A ten-foot giant squid has washed ashore on the Western coast of Japan. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my...
The nations of the Five Eyes security alliance - Australia, Canada, New Zealand, the USA and the UK - plus Japan and India, have called on technology companies to design their products so they offer access to encrypted messages and content. Which is why the seven signatories to the Statement "Urge industry to address our serious concerns where encryption is applied in a way that wholly precludes any legal access to content".
Syniverse said it is working with NTT DOCOMO to be the first to offer inbound 5G roaming service to mobile operators and their mobile customers when traveling to Japan. DOCOMO launched in September an inbound 5G roaming service to allow foreign mobile operators and their customers visiting Japan to roam on DOCOMO's 5G network.
Cybersecurity agencies across Asia and Europe have issued multiple security alerts regarding the resurgence of email-based Emotet malware attacks targeting businesses in France, Japan, and New Zealand. "The emails contain malicious attachments or links that the receiver is encouraged to download," New Zealand's Computer Emergency Response Team said.