> JapanHacked_
[Resolved][Severity: Moderate][Credential abuse]

Eco Project Cooperative: intruders used seven of its mail accounts to send spam, mostly to US addresses

Seven mail accounts were abused overnight from July 17 to 18 to send spam, mostly to US government, university and company domains. Its own mail was then partly blocked.

Disclosed

2020-07-22

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. Overnight into July 18, seven mail accounts were accessed without permission and used to send spam. [1] [2]

  2. Public disclosure; recipients were asked to delete the mail without opening it. [1] [2]

Impact

The spam went mostly to US .com, .net, .gov and .edu domains. No mail went to members or partners, and there was no sign of data being taken. Mail to and from the cooperative's domain was partly blocked, and it aimed to restore it by July 31. [1]

Response

The account passwords were changed to stronger ones. [1]

Timeline

  1. Started 2020-07-17
  2. Detected 2020-07-18
  3. Disclosed 2020-07-22
  4. 5 days

Attack or cause

Method
[Credential abuse]
Impact
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]不正アクセスによる迷惑メール大量送信に対するお詫びとお知らせEco Project Cooperative · 2020-07-22
  2. [2][News]メールアカウント7件に不正アクセス、海外への迷惑メール送信の踏み台に（エコ・プロジェクト協同組合）ScanNetSecurity · 2020-07-29 08:00