The container terminal at the Port of Nagoya recovered for the first time in two days after the suspension of operations due to a ransomware attack, and it is the first time in Japan that the operation of port facilities stops due to a cyber attack



It was found that the system was restored on the morning of the 6th at the Nagoya Port Container Terminal, which had been unable to load and unload containers due to a system failure since July 4, 2023. This system failure is known to be a cyber attack using ransomware, and it is reported overseas that `` Japan's largest port has stopped operations due to a ransomware attack ''.

Japan's largest port stops operations after ransomware attack
https://www.bleepingcomputer.com/news/security/japans-largest-port-stops-operations-after-ransomware-attack/



``Ransomware'' infection System failure at Nagoya Port recovered Port work resumed in the afternoon-Nagoya TV [Me-Tele]
https://www.nagoyatv.com/news/?id=019593

Nagoya Port system failure Loading and unloading work resumes after noon due to cyber attack | NHK | Aichi Prefecture
https://www3.nhk.or.jp/news/html/20230706/k10014119831000.html

From July 4, 2023, the Port of Nagoya, Japan's largest port and the port with the most users, has been in a situation where container loading and unloading operations have been suspended due to a ransomware attack. According to the Nagoya Port Authority , the Port of Nagoya has the largest land area (around 4,298 hectares) in Japan (approximately 4,298 hectares) and the annual cargo volume of approximately 168.55 million tons (as of 2020). In terms of trade value (as of 2020), the export value is 10.413755 trillion yen, and the import value is 4.31599 trillion yen, both of which are the highest in Japan.The number of automobiles exported (as of 2020) is also It is the number one port in Japan (about 1.11 million vehicles). In 2022, the container handling volume at Nagoya Port will be about 10,000 (converted to a 12-meter-long container) on average per day on weekdays. I am using the port.

According to reports , a failure occurred in the Nagoya Port Unified Terminal System (NUTS), a system that manages container terminals in the Port of Nagoya, around 6:30 on July 4.

However, as of July 3, some users complained about problems with the system.







It has been confirmed that loading and unloading was taking place when the system failure occurred.




However, after that, the system went down due to the influence of ransomware, and it seems that all work other than loading and unloading work became impossible.







In Nagoya Port, it is said that the document demanding ransom is being printed from the printer.




As of the 4th, all concerned parties have been notified that all container terminals at Nagoya Port are unable to carry in and out due to a system failure. According to NHK , the Aichi Trucking Association received a similar message from the Nagoya Port Transport Association, which manages the container terminal system at the port of Nagoya, on the night of the 4th.




According to the Ministry of Land, Infrastructure, Transport and Tourism, this is the first time that the operation of a domestic port facility has stopped due to a cyber attack.

The Port of Nagoya was also attacked in September 2022, and at this time, the website of the port was temporarily difficult to browse due to a DDoS attack launched by the pro-Russian group 'Killnet'. .

Regarding the attacker behind this cyber attack, Yukinobu Kikukawa, secretary general of the Nagoya Harbor Transport Association, told the news station, 'At the same time the system stopped, there was something printed out, and there was a 'lock'. Bit ``Ransomware, in short, an infection notification, but it has such a notification,'' he said. LockBit is a Russian-based hacker group known for using ransomware of the same name.




Trend Micro, which develops security software, has released an infection demonstration video of LockBit, which was the cause of this cyber attack.




According to the NHK report on July 6, 2023, it seems that the loading and unloading work of containers will be delayed after the afternoon of the 6th.

Related Posts:

in Security, Posted by logu_ii