Japan links Chinese hackers MirrorFace to dozens of cyber attacks

8 January 2025, 12:14

Hacker with a hood behind graphic showing and binary code
Hacker with a hood behind graphic showing and binary code. Picture: PA

The breaches targeted security and tech data at bodies including the Japanese foreign and defence ministries.

Japanese authorities have linked more than 200 cyber attacks over the past five years targeting the country’s national security and high technology data to a Chinese hacking group, MirrorFace.

The National Police Agency detailed the group’s tactics and called on government agencies and businesses to reinforce protective measures.

The NPA said its analysis on the targets, methods and infrastructure of the cyber attacks by MirrorFace from 2019 to 2024 concluded they were systematic attacks linked to China with an aim of stealing data on Japanese national security and advanced technology.

The targets of the Chinese government-led cyber attacks included Japan’s foreign and defence ministries, the country’s space agency and individuals including politicians, journalists, private companies and think tanks related to advanced technology, the NPA said.

Experts have repeatedly raised concerns about the vulnerability of Japan’s cybersecurity, especially as the country steps up its defence capabilities and works more closely with the United States and other partners to strengthen defences.

Japan has taken steps, but experts say more work is needed.

MirrorFace sent emails with attachments containing malware to targeted organisations and individuals to view data saved on computers mainly from December 2019 to July 2023, often from Gmail and Microsoft Outlook addresses using stolen identities, the NPA investigation found.

The emails typically used as subjects key words such as “Japan-US alliance”, “Taiwan Strait”, “Russia-Ukraine war” and “free and open Indo-Pacific”, and included an invitation for a study panel, references and a list of panellists, the NPA said.

In another tactic, the hackers targeted Japanese organizations in areas of aerospace, semiconductors, information and communications from February to October 2023 by exploiting vulnerabilities in virtual private networks to gain unauthorised access to information.

The attacks included one on the Japan Aerospace and Exploration Agency, or JAXA, which acknowledged in June it had suffered a series of cyber attacks since 2023, though sensitive information related to rockets, satellites and defence was not affected.

It is investigating to take preventative measures.

Last year, a cyber attack paralysed operations at a container terminal at a port in the city of Nagoya for three days.

More recently, Japan Airlines was hit by a cyber attack on Christmas, causing delays and cancellations to more than 20 domestic flights, though the carrier was able to stop the onslaught and restore its systems hours later and there was no impact on flight safety.

By Press Association

Latest World News

See more Latest World News

President Trump Hosts Japan's Prime Minister Shigeru Ishiba At The White House

Donald Trump slams brakes on some China tariffs in third trade war U-turn

A British man found dead with his wife inside their isolated French villa

British couple found dead in French villa named as fears former organised crime financial investigator was 'murdered'

At least two dead after the plane crashed in Sao Paulo

Plane crash claims at least two lives as light aircraft smashes into a bus in Sao Paulo

The Bering Air Caravan was heading from Unalakleet to Nome

Search under way as Bering Air plane carrying 10 people disappears while flying over Alaska

A British couple was reportedly found dead by a neighbour in Les Pesquiès, south of Villefranche-de-Rouergue.

British couple found dead inside 'isolated' French villa in 'feared burglary gone wrong'

Inga Gehricke, five, went missing following a family barbecue in Germany back in 2015.

Police launch fresh search efforts for missing girl linked to prime Madeleine McCann suspect

A utility firm has admitted its equipment started one of the LA fires last month.

California utility says its equipment likely sparked fire that raged through LA

Salim Iskef, 29, was one of ten people killed by lone gunman Rickard Andersson, 35, at Orebro's Risbergska adult education centre on Tuesday.

Heartbreaking final words of Sweden mass shooting victim shared with mum and fiancé revealed

Donald Trump is reportedly set to unveil his 100-day peace plan for Ukraine next week.

Donald Trump poised to unveil '100-day' peace plan for Ukraine next week

During a visit from Israeli Prime Minister Benjamin Netanyahu, Donald Trump announced plans for US ownership of the Gaza Strip, declaring "the Gaza thing has never worked."

Donald Trump claims no US troops will be needed for his plan to turn Gaza Strip into 'Riviera of the Middle East’

The chilling footage was reportedly taken by a student at the school.

Chilling Sweden mass shooting footage reveals 'gunman's scream' before opening fire and killing 10

Ebony McIntosh passed away aged 24.

Tributes pour in for beloved Brit travel influencer who died suddenly on 'dream' trip to Sri Lanka

President of Ukraine Volodymyr Zelensky says any peacekeeping force for Ukraine needs American soldiers.

Zelensky warns any peacekeeping force for Ukraine without US troops would be a 'win for Russia'

Two planes collide at Seattle Airport as Japan Airlines' wing slices through tail of Delta aircraft

Two planes collide at Seattle Airport as Japan Airlines' wing slices through tail of Delta aircraft

Russia's President Vladimir Putin

Ukraine accuses Russian spies of orchestrating bomb attacks on army offices

Nigel Farage has said he finds Donald Trump's plan for the US to own Gaza "very appealing".

Nigel Farage says Donald Trump's plan to 'take over Gaza' sounds 'very appealing'