> JapanHacked_
[Resolved][Severity: Major][Malware]

Japan Medical Association: a secretariat PC was infected with Emotet, and spoofed mail in the names of its contacts was sent

One secretariat PC opened a Word attachment and was infected. Names, addresses and text of mail stored in its mail software leaked and were used in spoofed mail.

Disclosed

2020-09-09

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. One secretariat PC at the Japan Medical Association building was found infected with Emotet. A Word attachment that slipped past the mail server's malware check had been opened. [1]

  2. From about this time, spoofed mail in the names of past contacts, such as staff, prefectural medical associations and ministry officials, was sent from unrelated servers. [1]

Impact

Email addresses, names and message text in the PC's mail software leaked. [1]

Timeline

  1. Started, Detected 2020-09-04
  2. Disclosed 2020-09-09
  3. 5 days

Attack or cause

Method
[Malware]
Impact
[Data leak]
Entry point
E-mail

Data exposed or at risk

[Name][E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][News]日本医師会で「Emotet」感染 - 「なりすましメール」出回るSecurity NEXT · 2020-09-09