PERSOL Process & Technology: the MITERAS mail server was abused to send about 250,000 spam mails
A settings gap left the MITERAS mail server open as a relay, and about 250,000 spam mails were sent from miteras.jp addresses. No customer data leaked.
Disclosed
2020-07-22
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
Impact
Response
Outside traffic was blocked and the mail server settings were fixed so it could no longer relay mail. [1]
Timeline
- Started 2019-12-02
- Disclosed 2020-07-22
- 233 days
Attack or cause
- Method
- [Misconfiguration]
- Impact
- Entry point
- Unknown
Data exposed or at risk
–
Services hit
Organizations involved
[Breached][Moderate]Tokyo, KotoInformation and communications
PERSOL Business Process Design Co., Ltd.Then named PERSOL PROCESS & TECHNOLOGY Co., Ltd.
Sources
- [1][News]メールサーバが踏み台に、約25万件の迷惑メール - パーソルP&TSecurity NEXT · 2020-07-30
- [2][News]不正アクセスにより「MITERAS」装った迷惑メール不正中継(パーソルプロセス&テクノロジー)ScanNetSecurity · 2020-07-28 08:00