🚨Cyber Alert ‼️ 🇯🇵Japan - 𝗝𝗮𝗽𝗮𝗻 𝗔𝗲𝗿𝗼𝘀𝗽𝗮𝗰𝗲 𝗘𝘅𝗽𝗹𝗼𝗿𝗮𝘁𝗶𝗼𝗻 𝗔𝗴𝗲𝗻𝗰𝘆 (𝗝𝗔𝗫𝗔) ALP-001 hacking group claims to have breached Japan Aerospace Exploration Agency (JAXA). Allegedly, the attackers exfiltrated 6.9 TB of data. Threat actor: ALP-001 Sector: Manufacturing Data exposure (claimed): 6.9 TB of data Data type: Not specified Observed: Mar 26, 2026 Status: Pending verification ESIX©: 7.84 Full details and impact assessment on HackRisk.io

For the past seven days we have been closely monitoring the cyber dimension of the ongoing tensions in the Middle East. Today we are introducing a new weekly intelligence snapshot: the 𝐇𝐚𝐜𝐤𝐦𝐚𝐧𝐚𝐜 𝐌𝐢𝐝𝐝𝐥𝐞 𝐄𝐚𝐬𝐭 𝐂𝐲𝐛𝐞𝐫 𝐂𝐨𝐧𝐟𝐥𝐢𝐜𝐭 𝐌𝐨𝐧𝐢𝐭𝐨𝐫. The goal is to provide a structured view of the cyber activity surrounding the conflict — highlighting 𝐚𝐟𝐟𝐞𝐜𝐭𝐞𝐝 𝐜𝐨𝐮𝐧𝐭𝐫𝐢𝐞𝐬, 𝐭𝐚𝐫𝐠𝐞𝐭𝐞𝐝 𝐬𝐞𝐜𝐭𝐨𝐫𝐬, 𝐭𝐡𝐫𝐞𝐚𝐭 𝐚𝐜𝐭𝐨𝐫𝐬 and 𝐭𝐞𝐜𝐡𝐧𝐢𝐪𝐮𝐞𝐬 𝐨𝐛𝐬𝐞𝐫𝐯𝐞𝐝. The data presented in this monitor is based exclusively on successful cyber attacks that have become publicly disclosed. Especially in a sensitive geopolitical context like the current one, many operations — particularly those involving espionage, sabotage or information warfare — are unlikely to surface immediately, if at all. As a result, the activity we observe should be considered only the visible layer of a much broader cyber conflict landscape. First 7 days overview: • 𝟑𝟖𝟐 𝐜𝐲𝐛𝐞𝐫 𝐢𝐧𝐜𝐢𝐝𝐞𝐧𝐭𝐬 𝐨𝐛𝐬𝐞𝐫𝐯𝐞𝐝 𝐚𝐜𝐫𝐨𝐬𝐬 𝐭𝐡𝐞 𝐫𝐞𝐠𝐢𝐨𝐧 • 𝟏𝟏 𝐜𝐨𝐮𝐧𝐭𝐫𝐢𝐞𝐬 𝐢𝐦𝐩𝐚𝐜𝐭𝐞𝐝 • 𝟒𝟓 𝐭𝐡𝐫𝐞𝐚𝐭 𝐚𝐜𝐭𝐨𝐫𝐬 𝐢𝐧𝐯𝐨𝐥𝐯𝐞𝐝 𝐢𝐧 𝐭𝐡𝐞 𝐚𝐜𝐭𝐢𝐯𝐢𝐭𝐲 • 𝐀𝐯𝐞𝐫𝐚𝐠𝐞 𝐄𝐒𝐈𝐗© 𝐢𝐦𝐩𝐚𝐜𝐭 𝐬𝐜𝐨𝐫𝐞: 𝟑.𝟕𝟑 The data shows a strong concentration of activity around 𝐠𝐨𝐯𝐞𝐫𝐧𝐦𝐞𝐧𝐭, 𝐦𝐢𝐥𝐢𝐭𝐚𝐫𝐲 and 𝐥𝐚𝐰 𝐞𝐧𝐟𝐨𝐫𝐜𝐞𝐦𝐞𝐧𝐭 targets, which alone account for nearly half of the observed incidents. In terms of geography, the highest volumes of activity have been observed in 𝐈𝐬𝐫𝐚𝐞𝐥, 𝐊𝐮𝐰𝐚𝐢𝐭 and 𝐉𝐨𝐫𝐝𝐚𝐧, while 𝐈𝐫𝐚𝐧, 𝐈𝐫𝐚𝐪 and 𝐭𝐡𝐞 𝐔𝐀𝐄 appear as the most impacted countries. From a technical perspective, 𝐃𝐃𝐨𝐒 campaigns dominate the activity, representing the vast majority of incidents recorded during the first week of the conflict — although typically associated with lower impact levels. By contrast, 𝐦𝐮𝐥𝐭𝐢𝐩𝐥𝐞 𝐭𝐞𝐜𝐡𝐧𝐢𝐪𝐮𝐞𝐬 and 𝐦𝐚𝐥𝐰𝐚𝐫𝐞 appear to be the most dangerous threats in terms of severity. This monitor will be updated every 7 days to track how the cyber dimension of the conflict evolves over time.