Okayama University: a mail account on a cloud server for a lab website was hijacked and sent 14,666 phishing mails
A teacher's mail account had a weak password, was logged into from outside, and sent phishing mail four times from July to September.
Disclosed
2020-10-08
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
On an outside cloud server used for a lab's public website, a teacher's mail account was logged into without permission. In total 14,666 phishing mails were sent on July 28 to 29, September 5, September 23 and September 25 to 26. [1]
As of October 8, no theft of mail or leak of personal data had been found. The university stopped the server's mail function and promised stricter password management. [1]
Timeline
- Started 2020-07-28
- Disclosed 2020-10-08
- 72 days
Attack or cause
- Method
- [Credential abuse]
- Impact
- Entry point
- Unknown
Data exposed or at risk
–
Organizations involved
[Breached][Moderate]Okayama, Okayama, KitaEducation and learning support
Okayama University
Sources
- [1][News]クラウドサーバに不正アクセス、フィッシングの踏み台に - 岡山大Security NEXT · 2020-10-09