> JapanHacked_
[Resolved][Severity: Moderate][Intrusion]

Fujisawa Machizukuri Association: the website of the Nagakubo Park botanical garden it runs was abused to send about 6,500 emails abroad

A malicious program was installed on the server and used as a stepping stone. The site was closed on January 17. It held no personal or confidential data.

Disclosed

2021-01-25

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. The server provider reported that a large amount of mail was being sent. The password of the server was changed. [1]

  2. The website was closed. [1]

Impact and response

The site ran in a separate environment from the city's official site. A malicious program was installed on the server, and about 6,500 messages were sent to destinations abroad. The city said the site stored no personal or confidential information, so no data leaked. [1]

The city told the association that runs the site to investigate the damage and cause, and recovery work is under way. [1]

Timeline

  1. Started, Detected 2021-01-16
  2. Disclosed 2021-01-25
  3. 9 days

Attack or cause

Method
[Intrusion]
Impact
Entry point
Web app

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][News]植物園サイトに不正アクセス、スパム送信の踏み台に - 藤沢市Security NEXT · 2021-01-25