Cyber Security News

Hackers Breached Japan Aerospace Company’s President Account

Hackers have infiltrated the Japan Aerospace Exploration Agency (JAXA), compromising the accounts of several high-ranking officials, including President Hiroshi Yamakawa.

This alarming incident is part of a series of cyberattacks targeting JAXA since June 2023, raising concerns about the security of sensitive information related to space exploration and national security.

Multiple Attacks Target High-Level Officials

According to the Asahi Shimbun report, JAXA has been the target of relentless cyberattacks, with four major incidents reported since mid-2023.

In the first attack, personal data belonging to about 5,000 employees was stolen, affecting nearly everyone in the agency’s network.

Analyse Any Suspicious Links Using ANY.RUN’s New Safe Browsing Tool: Try for Free

An internal investigation revealed that hackers took control of approximately 200 accounts, including those of five directors on JAXA’s nine-member board.

The targeted accounts belonged to senior officials involved in policy issues and budget affairs, indicating a strategic attempt to access confidential negotiations and planning information.

Compromised Cloud Services and Leaked Files

The breach investigation uncovered that Microsoft Corp.’s cloud service, Microsoft 365, was compromised during the June 2023 cyberattack.

Over 10,000 files stored on the platform could have been leaked, with more than 1,000 files provided by external parties under non-disclosure agreements.

These files included sensitive information from over 40 companies and organizations, such as NASA, the European Space Agency, Toyota Motor Corp., Mitsubishi Heavy Industries Ltd., and Japan’s Defense Agency.

The leaked documents primarily belonged to JAXA’s Strategic Planning and Management Department, Space Exploration Center, and Human Spaceflight Technology Directorate.

Impact on International Collaborations

Despite the severity of these breaches, JAXA has stated that there have been no reports of significant disruptions to operations or collaborations with domestic and international partners.

However, the agency acknowledges the potential damage to trust and is committed to enhancing its cybersecurity measures.

The leaked files included crucial data on international projects, such as NASA’s Artemis lunar exploration program and Toyota’s development of a manned lunar rover.

As investigations continue, JAXA remains focused on safeguarding its systems to prevent future incidents and maintain its collaborative efforts in space exploration. 

This series of cyberattacks highlights the growing threat to global aerospace agencies and underscores the need for robust cybersecurity strategies to protect sensitive information in an increasingly interconnected world.

Upgrade Your Cybersecurity Skills With 100+ Premium Cyber Security Courses Online - Enroll Here

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

1 day ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

1 day ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

1 day ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

2 days ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

2 days ago