[Resolved][Severity: Moderate][Web app exploit]

Repro: its owned media site Growth Hack Journal was altered, with unknown articles and categories added

The program behind the site's management system was broken into, and articles and categories were added from October 19 to 23.

Disclosed

2020-10-23

Organizations involved

Leaked or at risk

Unknown

Downtime

Unknown

What happened

2020-10-19
From 16:00 to 14:30 on the 23rd, parts of the site were altered: unwanted articles were posted and categories added. [1]

Response

The company deleted the articles and categories, disabled the account used to post them and fixed the management program. It said no leak of personal data or infection of visitors had been found. [1]

Timeline

Started 2020-10-19
Disclosed 2020-10-23
4 days

Attack or cause

Method: [Web app exploit]
Impact: [Site defacement]
Entry point: Web app

Data exposed or at risk

–

Services hit

[Breached][Moderate]
Growth Hack Journal

Service	Role	Impact level	Note
Growth Hack Journal	[Breached]	[Moderate]

Organizations involved

[Breached][Moderate]Tokyo, ShibuyaInformation and communications
Repro Inc.

						Note
Repro Inc.	[Breached]	[Moderate]	Tokyo, Shibuya	Information and communications	Unknown

Open in organization search

Sources

[1][News]モバイルマーケ情報サイトが改ざん - 意図しない記事投稿やカテゴリ追加Security NEXT · 2020-10-27
[2][News]オウンドメディア「Growth Hack Journal」に不正記事や不正カテゴリ追加の改ざん被害ScanNetSecurity · 2020-11-02 08:00