Flash Drives Delivered to Japanese Military in 2024 Contained Malware
NEOSEC enrichment — no mirror of the original source
Japan's Self-Defense Forces procured flash drives in March 2024 that were carrying a virus with ties to Chinese nation-state threat actors. In February 2025, military personnel began reporting that their devices were running unusually slowl
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Editorial context in the original issue
The SANS NewsBites issue carries commentary by: Dukes, Murray, Neely, Pescatore.
Linked advisories
Affected vendors and products
More on Delivered
Other advisories
- HighCVE-2026-111770MCP TypeScript server SDK: Shared transport or server instances delivered one HTTP client's messages to another
- Not ratedCVE-2026-111770MCP TypeScript server SDK: Shared transport or server instances delivered one HTTP client's messages to another
- Not ratedosv:CLEANSTART-2026-OA04032undici's retry interceptor can append the body of a ranged retry response to bytes already delivered from an earlier partial response while still presenting the original response's status and headers
- Not ratedosv:CLEANSTART-2026-BR61448race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics
- Not ratedosv:CLEANSTART-2026-ZP07254undici's retry interceptor can append the body of a ranged retry response to bytes already delivered from an earlier partial response while still presenting the original response's status and headers
- Not ratedosv:CVE-2026-92156F´: EventManager asserts on legal oversized LogBuffer values delivered over the standard GenericHub event bridge
- Not ratedosv:CLEANSTART-2026-FA02454undici's retry interceptor can append the body of a ranged retry response to bytes already delivered from an earlier partial response while still presenting the original response's status and headers
- Not ratedosv:CLEANSTART-2026-HV53222race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics
Other news entries
- LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and BackdoorNewsThe Hacker News
- Popular WordPress SEO Plugin Rank Math PRO Hijacked to Deliver Self-Restoring BackdoorNewsThe Hacker News
- Targeted ads installed Candiru spyware in zero-click attacksNewsBleepingComputer
- Targeted ads delivered 0-click exploits to install mercenary malwareNewsArs Technica — Security
- CikaBika Bot RAT Uses Discord for C&CNewsSecurityWeek
- Welcome to the Jungle: What We Found Inside 15,465 Public MCP ServersNewsThe Hacker News
- Security through obscurity is dead, and AI delivered the fatal blowNewsThe Register — Security
- Coder's registry infrastructure compromised to push malicious modulesNewsBleepingComputer
ID