Japan Accuses Chinese Hackers of Extensive Cyber Attacks
The Japanese government has issued a significant alert, pointing fingers at a Chinese hacking group known as MirrorFace. This group has allegedly targeted and breached various government organizations, companies, and individuals in Japan since 2019.
- MirrorFace has been linked to cyber attacks aimed at stealing information crucial to Japan’s national security and advanced technology.
- Targets reportedly include Japan’s Foreign and Defense ministries, the space agency, politicians, journalists, private companies, and tech think tanks.
“The MirrorFace attack campaign is an organized cyber attack suspected to be linked to China,” authorities stated in the alert.
— Machine Translation of Japanese Authorities’ Alert
Japan’s Computer Emergency Response Team Coordination Center (JPCERT/CC) highlighted a shift in MirrorFace’s targets. Initially focusing on media and political organizations, it has now moved towards manufacturers and research institutions since 2023.
In 2022, cybersecurity firm ESET detailed a spearphishing email campaign by MirrorFace targeting Japanese political entities ahead of elections. Though this technique is common among hackers, ESET noted that MirrorFace seemed independent from other known Chinese government hacking groups.
The recent alert outlines three separate spearphishing campaigns:
- 2019-2023: Targeting think tanks, politicians, and journalists.
- Since 2023: Focusing on internet-connected devices in semiconductor, manufacturing, and aerospace sectors.
- Starting June 2024: Targeting academics, think tanks, politicians, and media in Japan.
Japan’s pacifist constitution has historically limited its cyber capabilities. Yet, the nation remains a key U.S. ally. The Washington Post reported in 2023 that Chinese military hackers had compromised some of Japan’s most sensitive defense networks as early as 2020.
This evolving cyber threat underscores the need for enhanced cybersecurity measures to protect national interests and technological advancements. Looking ahead, Japan may need to reconsider its strategies to effectively counter such persistent cyber threats.
