> JapanHacked_
[Resolved][Severity: Moderate][Misconfiguration]

PERSOL Process & Technology: the MITERAS mail server was abused to send about 250,000 spam mails

A settings gap left the MITERAS mail server open as a relay, and about 250,000 spam mails were sent from miteras.jp addresses. No customer data leaked.

Disclosed

2020-07-22

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. From this day, the MITERAS mail server could be used as a relay from outside. [1] [2]

  2. From this day to July 20, spam was sent from miteras.jp addresses. [1] [2]

  3. Around this time, the mail server went down. [2]

  4. Public disclosure. [1] [2]

Impact

About 250,000 spam mails were sent; their subjects and text are not known. The company said no leak of data held in MITERAS had been confirmed. [1] [2]

Response

Outside traffic was blocked and the mail server settings were fixed so it could no longer relay mail. [1]

Timeline

  1. Started 2019-12-02
  2. Disclosed 2020-07-22
  3. 233 days

Attack or cause

Method
[Misconfiguration]
Impact
Entry point
Unknown

Data exposed or at risk

–

Services hit

Organizations involved

Open in organization search

Sources

  1. [1][News]メールサーバが踏み台に、約25万件の迷惑メール - パーソルP&TSecurity NEXT · 2020-07-30
  2. [2][News]不正アクセスにより「MITERAS」装った迷惑メール不正中継(パーソルプロセス&テクノロジー)ScanNetSecurity · 2020-07-28 08:00