Zooming into Darknet Threats Targeting Japanese Organizations

KELA analyzes darknet activity targeting Japanese organizations, highlighting pervasive data leaks and credential compromises used to gain initial access, which attackers have leveraged for ransomware campaigns by multiple gangs (e.g., DoppelPaymer, Maze, Sodinokibi, Conti) during June–October 2020. The report details large volumes of leaked emails and credentials, exposed corporate data, autoshop offerings, and Pulse Secure leak implications, underscoring an expanding attack surface driven by remote work and targeting of healthcare and education sectors.