> JapanHacked_
[Resolved][Severity: Moderate][Intrusion]

RT Corporation: an intruder changed its website settings and sent visitors to an outside site

An intruder changed the robot maker's website settings so visitors went to an unrelated site. No personal data leaked, and its online shop runs on another server.

Disclosed

2020-06-11

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. Visitors to the site began to be sent to a third party's site; an intruder had changed the site settings. [1] [2]

  2. The site was taken down, and around noon an older backup was put up for the time being. [1] [2]

  3. The cause was found, the site was restored and the incident was disclosed. The company changed its hosting server. [1]

Impact

There was no sign of changes to the site beyond the redirect, and no personal data leaked. The online shop runs on a different server, and customer data was not affected. [1] [2]

Timeline

  1. Started, Detected 2020-06-09
  2. Disclosed 2020-06-11
  3. 2 days

Attack or cause

Method
[Intrusion]
Impact
[Site defacement]
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][News]不正アクセスで設定書き換え、別サイトへ転送(アールティ)ScanNetSecurity · 2020-06-22 08:00
  2. [2][News]サイトが改ざん被害、外部サイトへ誘導 - ロボット開発会社Security NEXT · 2020-06-24