A report published on Tuesday by Trend Micro provides a detailed view of Japan’s cybercriminal underground which, despite being in its infancy, has all the elements needed to thrive.
Japanese individuals and organizations have often been targeted by both APT actors and profit-driven cybercriminals. While some of these threats have been traced to other countries, Japan has its own share of malicious actors and many of them are after more than just playing cat and mouse games with law enforcement.
The country’s National Police Agency reported earlier this year that queries about cybercrime cases increased by nearly 40 percent compared to the previous year, with online fraudsters causing losses estimated at millions of dollars.
While not as well developed as the cybercriminal underground in Russia and China, the Japanese scene is evolving and there is increasing interest in the use of various tools and malware development.
According to researchers, forums and bulletin board systems play an important role on the Japanese underground as they allow cybercriminals to shop for products and services, and exchange messages with others while maintaining their anonymity.
These websites, which are often gated and screen their members, rely on Tor and I2P to protect their operations. Users who sign up often use a secret language when selling illegal goods and services to mask the real object of their transactions.
As for payment, Japanese underground players prefer gift cards, including PlayStation Store cash cards and Amazon gift cards, over Bitcoin, WebMoney and other payment methods that are popular in other countries.
An analysis of the Japanese market offerings revealed some interesting aspects. For instance, the average value of a stolen Japanese credit card verified by Visa was $60, much more than UK and US cards which cost only $7-8.
Credentials for PayPal and SSH accounts cost roughly the same as in other countries, approximately $1-2 per record.
It’s also worth noting that the fake passports sold by Japanese cybercriminals are far cheaper than the ones sold by others. For example, a US passport, which can cost as much as $5,900 when purchased from other sources, can be obtained on the Japanese market for just $1,000.
Trend Micro pointed out in its report that the Japanese underground veers away from malware creation, mainly due to strict legislation and lack of technical know-how, and instead cybercriminals prefer to acquire tools from foreign peers.
“Although our observations reveal that Japanese cybercriminals lack the technical know-how needed for malware creation, the interest is there, as evidenced by exchanges on how to monetize malware tools purchased from other regional underground markets,” Trend Micro wrote in its report. “Once enterprising individuals discover the feasibility of making money using hacking or malware, we may see more locally produced hacking tools and tips on Japanese underground sites.”
The complete report, titled “The Japanese Underground,” is available for download in PDF format from Trend Micro.
Related Reading: Japan Sees 25 billion Cyberattacks in 2014