Japan securities accounts targeted via Apple and Google account hijacks

Reports indicate that unauthorized transactions have occurred in securities accounts following the hijacking of personal Apple and Google accounts. The Japan Securities Dealers Association has issued warnings to member firms, requesting increased monitoring of suspicious transactions, verification of multi-factor authentication, and heightened customer awareness.

Experts note that while passkeys themselves remain secure, the vulnerability lies in the synchronization of login credentials through cloud services like iCloud Keychain and Google Password Manager. If a primary cloud account is compromised, the stored credentials for linked services, including brokerage accounts, can be accessed by attackers. This method of theft has been linked to significant fraudulent trading activities, where attackers sell off holdings to manipulate stock prices.