Japan's Ground Self-Defense Force used China-linked malware-infected USB drives on military networks for nearly a year
By
Graham CLULEY
Summary
Leaked internal documents reveal that Japan's Ground Self-Defense Force (JGSDF) unknowingly used counterfeit USB flash drives infected with malware on computers connected to sensitive military networks for nearly a year. The infected drives, linked to Chinese hacking operations, were delivered during disaster relief operations following an earthquake in central Japan in March 2024, bypassing standard procurement channels. The investigation was conducted by Nikkei Asia.
Source
Key quotes
· 3 pulledLeaked internal documents have revealed that for nearly a year Japan's Ground Self-Defense Force (JGSDF) used counterfeit USB flash drives infected with malware on computers connected to sensitive military networks.
The USB drives have been linked to Chinese hacking operations, according to an investigation by Nikkei Asia.
The poisoned flash drives were delivered to the JGSDF in March 2024, during disaster relief operations following an earthquake in central Japan.
You might also wanna read
Kaspersky Researchers Document New Infection Chains and IoCs in Notepad++ Supply Chain Attack
Kaspersky GReAT experts discovered previously undocumented infection chains used in the Notepad++ supply chain attack that occurred from Jun
FBI official says China's Salt Typhoon espionage campaign likely compromised data of nearly every American
An FBI cyber official stated that China's Salt Typhoon espionage campaign has likely stolen information from nearly every American through y
Massive Document Leak Exposes Great Firewall of China's Internal Operations
The Great Firewall of China experienced its largest-ever document leak on September 11, 2025, with over 500 GB of internal documents, source
Security researcher publishes YellowKey zero-day exploit that bypasses Microsoft BitLocker encryption via USB stick
Security researcher Chaotic Eclipse (Nightmare-Eclipse) has published two new zero-day exploits targeting Microsoft systems after their prev
Kimsuky Leak Exposes North Korea's Credential Theft Operations and Chinese Infrastructure Links
A rare breach attributed to a North Korean-affiliated actor known as "Kim" has exposed detailed insights into Kimsuky (APT43) operations. Th
dti.domaintools.com·9mo agoTechnical Analysis of China's Great Firewall Unconditional Port 443 Block on August 20, 2025
This technical report documents a significant internet disruption event where China's Great Firewall (GFW) implemented an unconditional bloc

Comments
Sign in to join the conversation.
No comments yet. Be the first.