Ryukoku University Co-op: two PCs were infected with what appears to be Emotet, and mail addresses of university staff, students and partners may have leaked

1. 2020-08-31 15:30

   A co-op PC received a suspicious mail. Checks found two PCs infected, and mail claiming to be from co-op staff had reached colleagues and contacts. The co-op notified the university, took the PCs offline and wiped them. [1]

2. 2020-09-01

   The mail account was suspended. [1]

3. 2020-09-02

   The co-op apologized and warned contacts on its website, and reached the 34 students concerned directly by mail and phone. [1]

4. 2020-09-18

   The final report said the cause was a staff member opening an attachment, and the malware was most likely Emotet or something similar. [1]

Mail addresses and message text stored on the infected PCs may have leaked: about 160 university staff, 34 students, about 50 business partners and about 30 co-op staff and work addresses. [1]

The co-op said it would step up security training, tighten mail rules and check its security software updates regularly. [1]