> JapanHacked_
[Resolved][Severity: Moderate][Credential abuse][Phishing]

LINK-J: a staff mail account was misused to send phishing mail to 1,733 contacts

Mail with a link to a likely phishing site went out by BCC from a staff account of the life science network, and the addresses of 1,733 contacts may have leaked.

Disclosed

2020-08-05

Organizations involved

1

Leaked or at risk

1.7K

1,733

Downtime

Unknown

What happened

  1. At about this time, improper mail with many addresses in BCC was sent from a staff mail account. It contained a URL that could lead to a phishing site. [1] [2]

  2. Public disclosure. [2]

Impact and response

Email addresses of 1,733 contacts who had exchanged mail with the staff member may have leaked. Logins to the account were restricted and all staff were told to change their passwords. [1] [2]

Timeline

  1. Started, Detected 2020-07-23
  2. Disclosed 2020-08-05
  3. 13 days

Attack or cause

Method
[Credential abuse][Phishing]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][News]メルアカに不正アクセス、関係者へフィッシングメール - LINK-JSecurity NEXT · 2020-08-06
  2. [2][News]職員のアカウントを踏み台に1,733名に不審メール送信（LINK-J）ScanNetSecurity · 2020-08-11 08:00