> JapanHacked_
[Resolved][Severity: Moderate][Credential abuse]

Okayama University: a lecturer's mail account was hijacked and sent about 1.5 million spam emails

The mail password of one Okayama University lecturer was stolen, and about 1.5 million spam emails went out from the address at the end of January; no data leak was found.

Disclosed

2020-02-28

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

One lecturer's mail password was stolen, and at the end of January outside access used the address to send about {n:1500000} spam emails. The university disclosed this on . The lecturer was reported to have reused the password on other services. [1] [2]

Impact

No reading of mail, leak of personal or other confidential data, or secondary damage was found. [1]

Timeline

  1. Disclosed 2020-02-28
  2. 1 days

Attack or cause

Method
[Credential abuse]
Impact
Entry point
Stolen credentials

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][News]メールパスワード1件窃取、迷惑メール150万件送信(岡山大学)ScanNetSecurity · 2020-03-03 08:00
  2. [2][News]教員アカウント乗っ取られ150万通の迷惑メール、使いまわし原因か│岡山大学Cybersecurity.com · 2020-03-03