> JapanHacked_
[Resolved][Severity: Major][Credential abuse]

LINE: a mass login attempt on livedoor ID got into some accounts

Someone other than the owners tried large numbers of logins on livedoor IDs; most were blocked, but some accounts were entered.

Disclosed

2020-05-24

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. The company detected the large-scale login attempt and issued a warning. [1] [2]

Impact

Most attempts failed with invalid IDs or wrong passwords and were blocked automatically, but some accounts were logged into. The number of accounts entered was not given. [2]

Response

Owners of accounts that were entered were contacted one by one, and users were asked not to reuse passwords and to choose ones hard to guess. [2]

Timeline

  1. Disclosed 2020-05-24
  2. 1 days

Attack or cause

Method
[Credential abuse]
Impact
Entry point
Stolen credentials

Data exposed or at risk

–

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][News]livedoor IDへの大規模な不正ログイン検知、大部分は自動遮断するも一部は成功（LINE）ScanNetSecurity · 2020-05-27 09:00
  2. [2][News]「livedoor ID」に対して大規模な不正ログイン試行Security NEXT · 2020-05-25