Welcome to SOCRadar’s 2025 Japan Threat Landscape Report (Japanese)!

Japan continues to face a commercially driven cyber threat environment where data theft, access sales, ransomware, phishing, and DDoS attacks intersect. This report analyzes how threat actors target Japanese organizations and monetize stolen data and credentials across underground ecosystems.
Download the full report to gain concise insights into Japan’s evolving cyber risk landscape.

Key Insights from Japan’s Cyber Threat Landscape

• Dark Web Activity Is Highly Commercialized: 63% of posts involve selling, and over 70% of threats relate to stolen data and databases.

• Japan-Only Targeting Is Significant: 64% of dark web threats focus exclusively on Japanese organizations.

• Qilin Dominates Ransomware Activity: Qilin accounts for roughly 40% of observed ransomware incidents targeting Japan.

• Phishing Targets Digital and Financial Platforms: Information services lead phishing campaigns at over 22%, followed by security and crypto-related themes.

• HTTPS Is Widely Used in Phishing: 74% of phishing sites use HTTPS to appear legitimate.

• DDoS Activity Remains Intense: Over 253,000 DDoS attacks were recorded, with peak bandwidth reaching 488.43 Gbps.