Japan experienced a sharp rise in ransomware attacks during the first half of 2025, with 68 reported incidents, up 1.4 times from the same period last year, reports GBHackers News.
According to Cisco Talos, manufacturing was the most targeted sector at 18.2%, followed by automotive, trading, construction, and transportation industries. Small and medium-sized enterprises bore the majority of attacks, accounting for 69% of victims, reflecting their relative cybersecurity vulnerabilities. The ransomware landscape has shifted following the dismantling of dominant groups like LockBit and 8Base, making room for emerging actors. Qilin became the most prolific threat, claiming eight Japanese victims, while newcomers like Kawa4096 launched sophisticated campaigns using KaWaLocker ransomware. This malware employs advanced encryption, double-extortion tactics, selective file targeting, and post-encryption commands such as shadow deletion and system reboots. Cisco Talos noted that KaWaLocker 2.0 introduced obfuscation features, further complicating incident response. Experts urge Japanese SMEs to enhance vulnerability management, share threat intelligence, and remain vigilant against this evolving ransomware threat.
According to Cisco Talos, manufacturing was the most targeted sector at 18.2%, followed by automotive, trading, construction, and transportation industries. Small and medium-sized enterprises bore the majority of attacks, accounting for 69% of victims, reflecting their relative cybersecurity vulnerabilities. The ransomware landscape has shifted following the dismantling of dominant groups like LockBit and 8Base, making room for emerging actors. Qilin became the most prolific threat, claiming eight Japanese victims, while newcomers like Kawa4096 launched sophisticated campaigns using KaWaLocker ransomware. This malware employs advanced encryption, double-extortion tactics, selective file targeting, and post-encryption commands such as shadow deletion and system reboots. Cisco Talos noted that KaWaLocker 2.0 introduced obfuscation features, further complicating incident response. Experts urge Japanese SMEs to enhance vulnerability management, share threat intelligence, and remain vigilant against this evolving ransomware threat.
