Japan vs. MirrorFace: The Cyber Battle Royale with a Side of Phishing
MirrorFace, a China-linked threat actor, has been accused of targeting Japan’s national security by the National Police Agency and National Center of Incident Readiness and Strategy for Cybersecurity. Since 2019, they’ve been orchestrating attacks using tools like ANEL and NOOPDOOR, with campaigns spanning various sectors including academia, aerospace, and media.
Hot Take:
Mirror, Mirror, on the wall, who’s the sneakiest cyber threat of them all? Apparently, it’s MirrorFace, who’s been playing ‘hide and seek’ with Japanese cybersecurity for years. And spoiler alert: they’re winning.
Key Points:
- MirrorFace, a China-linked threat actor, has been targeting Japan since 2019.
- The attacks aim to gather information on national security and advanced tech.
- MirrorFace is believed to be a subgroup within APT10, employing tools like ANEL and NOOPDOOR.
- The campaigns have targeted various sectors including think tanks and the semiconductor industry.
- Innovative use of Windows Sandbox allows the attackers to evade detection.
Already a member? Log in here