New wiper malware using Tokyo Olympic-themed documents as a disguise has been discovered. Researchers have analyzed the malware’s obfuscation techniques and specific targeting of files created using Japanese word processors, which likely indicate that Japanese organizations are at risk, although no targeted organizations have been confirmed. Wiper attacks are typically attributed to nation-state−associated threat groups; however, this attack had little impact and the malware’s code was not technically sophisticated, making the involvement of a nation-state less likely. Ongoing backlash in Japan towards the Olympics makes it realistically possible that a domestic threat actor is responsible. Attribution remains unconfirmed, but this incident demonstrates the varied nature of cyber activity towards Olympic events that often brings various cyber-threat activities to the fore.
Digital Shadows
Threat Intelligence and Digital Risk Protection Resources
