> JapanHacked_
[Resolved][Severity: Moderate][Credential abuse]

Good Life Company: a mail account was broken into and used to send spam

A mail account of the real estate company was hijacked and used to send spam. The mail service provider alerted the company.

Disclosed

2020-10-29

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

On October 22, the company's mail service provider told it that one of its mail accounts had been accessed without permission and used to send spam. [1]

The company changed the password and scanned all staff PCs, finding no infection. It asked recipients to delete suspicious mail from its domain without opening it. [1]

Timeline

  1. Detected 2020-10-22
  2. Disclosed 2020-10-29
  3. 7 days

Attack or cause

Method
[Credential abuse]
Impact
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][News]メルアカに不正アクセス、スパム送信の踏み台に - グッドライフカンパニーSecurity NEXT · 2020-10-29