[Resolved][Severity: Moderate][Intrusion]

Tsunagu Network Communications: malicious links were planted in articles of the condominium site Mansion Lab

An intruder altered article pages, and malicious links stayed in them from October 3 to 6. The company said no personal data leaked.

Disclosed

2020-10-14

Organizations involved

Leaked or at risk

Unknown

Downtime

Unknown

What happened

2020-10-03 01:55
Planted malicious links began to appear in articles. [1] [2]
2020-10-06 17:00
The site was closed. [1]
2020-10-14
The company disclosed the case. [2]

Response

The company restored the pages, tightened security and reopened the site. It asked anyone who read articles during that time to scan their devices for malware. [1]

Timeline

Started 2020-10-03
Detected 2020-10-06
Disclosed 2020-10-14
11 days

Attack or cause

Method: [Intrusion]
Impact: [Site defacement]
Entry point: Web app

Data exposed or at risk

–

Services hit

[Breached][Moderate]
Mansion Lab

Service	Role	Impact level	Note
Mansion Lab	[Breached]	[Moderate]

Organizations involved

[Breached][Moderate]Tokyo, ChiyodaInformation and communications
Tsunagu Network Communications Inc.

						Note
Tsunagu Network Communications Inc.	[Breached]	[Moderate]	Tokyo, Chiyoda	Information and communications	Unknown

Open in organization search

Sources

[1][News]「マンション・ラボ」に不正アクセス - 記事ページが改ざん被害Security NEXT · 2020-10-20
[2][News]「マンション・ラボ」に不正アクセス、記事ページが改ざん（つなぐネットコミュニケーションズ）ScanNetSecurity · 2020-10-20 08:00