> JapanHacked_
[Resolved][Severity: Moderate][Intrusion]

RFLocus: pages of the company website were altered and could make visitors download unwanted files

Pages of the RFID firm's website were altered from the night of August 6 to the evening of August 17, a period with about 1,100 visits. Visitors were asked to scan devices.

Disclosed

2020-08-25

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. From about this time, some pages were in an altered state after unauthorized access by a third party. [1]

  2. At about this time the company noticed possible unauthorized access, confirmed the alteration and shut down the web server on the spot. [1]

  3. Public disclosure. [1]

Impact

Opening an altered page could download an unintended file. The pages had about 1,100 visits in that period. Visitors were asked to update their security software and scan for malware. [1]

Timeline

  1. Started 2020-08-06
  2. Detected 2020-08-17
  3. Disclosed 2020-08-25
  4. 19 days

Attack or cause

Method
[Intrusion]
Impact
[Site defacement]
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]弊社ウェブサイト改ざんに関するお詫びとご報告RFLocus · 2020-08-25