Science & Tech · Cybersecurity · 2 hrs ago
NICT warns of attacks on servers behind public apps
Japan’s NICT has warned of a method it calls an A2B attack, in which attackers study publicly available Android apps to find the servers and APIs they use.
The targets are backend servers that support the apps, not necessarily flaws in the apps themselves.
Weak server checks, such as poor access controls or input validation, can allow unauthorized access or expose personal information.
NICT says similar risks can affect iOS apps and web services, too.
It also warned that AI could make app analysis and flaw-finding faster, potentially helping attacks reach more systems.
NICT recommends providers review their APIs, server logs and security settings, and restrict or disable services they do not need.
The team published three IP addresses linked to attacks, but says a match alone cannot confirm a breach; providers should check other evidence as well.
NICT warned businesses that attackers are analyzing publicly available apps to target the servers behind them.
The agency named the method “A2B attacks,” short for App-to-Backend Attack, and announced it on October 13.
Attackers can inspect an app to identify the servers and APIs it uses, then tailor attacks to those systems.
Weak server-side authentication, access controls or input checks can lead to unauthorized access and personal information leaks, even if an app itself has no vulnerability.
NICT urged providers of Android and other apps, as well as web services, to review their security measures.
- Who
- NICT’s LETTICE threat intelligence analysis team issued the warning to app and service providers.
- What
- NICT identified and named a method in which attackers analyze public apps and target their backend servers.
- When
- October 13. The article was published in 2026.
- Where
- Japan; the article describes information leaks in the country.
- Why
- Backend security flaws can enable unauthorized access and personal information leaks, even when an app has no vulnerability.
This story does not have two clearly opposing sides.
This story does not have a timeline yet.
- Attack method
- A2B (App-to-Backend Attack)
- Announced by
- NICT’s LETTICE team
- Date announced
- October 13
- Related IP addresses
- 3
- Potentially affected services
- Android apps, iOS apps and web services
What people are saying
We strongly recommend that businesses publishing Android apps urgently review their security measures, on the assumption that their apps may be analyzed by attackers and the results used to attack backend servers.
Sources
Related news
Ahold Delhaize takes some systems offline after cyberattack
Cyberattack overheats refrigeration systems in hundreds of French supermarkets
Cyberattack Defrosts Refrigerators at Hundreds of French Supermarkets
Cyberattack disrupts systems at TFG’s three UK fashion brands
GitLab urges self-managed users to patch critical code execution flaw
Ridge Security launches on-site AI penetration testing system
French supermarket hack raises concerns about smart home devices
Hackers take control of cooling units at 350 French supermarkets
Canadian cybersecurity executive arrested on federal extortion charges
Preinstalled malware found on low-cost Android phones in more than 150 countries
Up to 6.5 million customer records may be exposed in Japan sushi cyberattack
