> JapanHacked_
[Resolved][Severity: Moderate][Credential abuse][Phishing]

Okayama University: a stolen mail password let outsiders send about 2,000 spam messages

The password of one mail user was stolen, and spam went out from the account on the evening of August 24. Some messages may have carried malware. No data leak was found.

Disclosed

2020-08-26

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. From about this time to about 20:10, an outsider used one user's address to send about 2,000 spam messages. [1] [2]

  2. Public disclosure. [2]

Impact

Some messages may have carried files with malware. The university found no sign that mail was read or personal data leaked. [1] [2]

Timeline

  1. Started, Detected 2020-08-24
  2. Disclosed 2020-08-26
  3. 2 days

Attack or cause

Method
[Credential abuse][Phishing]
Impact
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][News]メールアカウントに不正アクセス、スパム踏み台に - 岡山大Security NEXT · 2020-08-27
  2. [2][News]利用者1名のパスワードが窃取、迷惑メール送信の踏み台に（岡山大学）ScanNetSecurity · 2020-08-28 08:00