CSS CYBER DEFENSE PROJECT Hotspot Analysis A one-sided Affair: Japan and the People's Republic of China in Cyberspace Zürich, January 2020 Version 1 Risk and Resilience Team Center for Security Studies (CSS), ETH Zürich A one-sided Affair: Japan and the PRC in Cyberspace Author: Stefan Soesanto © 2020 Center for Security Studies (CSS), ETH Zürich Contact: Center for Security Studies Haldeneggsteig 4 ETH Zürich CH-8092 Zürich Switzerland Tel.: +41-44-632 40 25
[email protected] www.css.ethz.ch Analysis prepared by: Center for Security Studies (CSS), ETH Zürich Disclaimer: The opinions presented in this study exclusively reflect the author’s views. Please cite as: Stefan Soesanto (2020): A one-sided Affair: Japan and the People’s Republic of China in Cyberspace, January 2020, Center for Security Studies (CSS), ETH Zürich. 1 A one-sided Affair: Japan and the PRC in Cyberspace Table of Contents 1 Introduction 3 2 Background 3 2.1 Japanese cybersecurity & defense policy 5 2.2 Chinese cybersecurity & defense policy 7 3 Threat landscape chronology 10 4 Japanese teams targeting China 15 5 Chinese teams targeting Japan 16 5.1 Nationalistic Hacktivists 16 Honker Union (中国红客) 16 LuckyCat 17 5.2 People’s Liberation Army (PLA) 18 APT1/Comment Group 18 APT12/IXESHE/DynCalc 18 5.3 Ministry of State Security (MSS) 19 APT10/MenuPass/Stone Panda 20 Blue Termite/CloudyOmega/EMDIVI 21 Winnti group/Winnti Umbrella 21 5.4 Contractors 22 Dust Storm 22 Stalker Panda 22 Icefog/Dagger Panda 23 5.5 Unsorted 23 Tick/Bronze Butler/REDBALDKNIGHT 23 DragonOK 24 Budminer/Taidoor 24 6 Effects 25 6.1 Social effects 25 6.2 Economic effects 26 6.3 Technological effects 27 6.4 International effects 27 7 Future Outlook 28 8 Abbreviations 29 9 Bibliography 30 2 A one-sided Affair: Japan and the PRC in Cyberspace 1 Introduction 2 Background This Hotspot analysis takes a deep dive into the Since the birth of the People’s Republic of China cyber threat landscape between Japan and the People’s on October 1, 1949, diplomatic relations between Republic of China.