> JapanHacked_
[Resolved][Severity: Moderate][Credential abuse]

ERI: an employee mail account was broken into and used to send spam

One employee mail account at the embedded device maker in Morioka was taken over and used to send spam. No data leak was confirmed.

Disclosed

2020-08-20

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. The company running its mail service reported that one employee account had been used to send spam. [1] [2]

  2. Public disclosure. [2]

Response

The account password was changed, and a full scan of every employee PC found no infection. Staff also checked for reused passwords. [1] [2]

Timeline

  1. Detected 2020-08-18
  2. Disclosed 2020-08-20
  3. 2 days

Attack or cause

Method
[Credential abuse]
Impact
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][News]不正アクセスでスパムの踏み台に - システム開発会社Security NEXT · 2020-08-24
  2. [2][News]メールアカウントに不正アクセス、迷惑メール送信の踏み台に（イーアールアイ）ScanNetSecurity · 2020-08-25 08:00