In recent days, military exercises between Japan and the US have led to a series of DDoS attacks on Japanese websites. These attacks, carried out by actors supported by Russia, targeted political parties, companies and government organizations.

Important findings

  • Russian actors have launched DDoS attacks on dozens of websites in Japan.
  • The attacks began after Russian protests against the upcoming military exercises by Japan and the US.
  • Affected organizations include the Liberal Democratic Party, large manufacturers and local governments.

Background of the attacks

The DDoS attacks began shortly after the announcement by Japan and the US of military exercises known as Operation Keen Sword 25. These exercises are planned for the period from 23 October to 1 November. Russian cyber actors responded to this announcement with a wave of attacks that paralysed several major websites in Japan.

Affected websites

Attacked websites include:

  • The website of the Liberal Democratic Party, led by Prime Minister Abe Shinzo.
  • The Yamanashi Prefecture website, which recorded 6.2 million visits from 69 countries on Wednesday.
  • Websites of major organizations such as the Japan Chamber of Commerce and Industry and Kawasaki Heavy Industries.

Responsible actors

An actor calling himself "NoName057(16)" took responsibility for the attacks. In a statement on Platform X, he said that Japan’s military operations on the Russian border could not go unanswered. He stressed that measures against Russia could have serious consequences.

Technical Details of Attacks

According to cyber security firm Netscout, the DDoS attacks used several direct attack vectors without spoofing. These originated mainly from known networks, cloud providers and VPN networks. The attacks are ongoing, and the hacktivists are expanding their DDoSia botnets to attack new targets.

Previous attacks

The Sasakawa Peace Foundation in Tokyo reported that Russian actors had already carried out similar attacks in June after Japan backed a G7 proposal to use frozen Russian assets to secure a $50 billion loan to Ukraine. Also during the Japan-Ukraine conference in February, several major Japanese websites were attacked.

Conclusion

The current DDoS attacks on Japan highlight the growing tensions between Russia and Japan, especially in the context of military exercises and geopolitical conflicts. The cyberattacks are another example of the increasing importance of cyberwarfare in international relations.

Sources

  • Military Exercises Trigger Russian DDoS Attacks on Japan, BankInfoSecurity.