Yamaguchi Prefectural Industrial Technology Institute: a four-year-old setup error let spammers relay mail through its server

1. 2020-04-30

   From this day to 2020-05-13, the mail server relayed spam from outside to third parties. [1]

2. 2020-05-13

   Public disclosure; the settings were fixed. [1]

The emails were advertising offers in Portuguese sent from servers abroad, mostly to free mail and Brazilian addresses. The institute's address was put on relay block lists, so some of its own mail stopped arriving. It said there was no malware infection or data leak. [1] [3]

A setup error made when the mail server was replaced in 2016 let specific outside addresses forward mail to third parties. [1]