> JapanHacked_
[Resolved][Severity: Critical][Intrusion]

Denyo: a mail account was accessed without authorization and abused to send mass spam, and the mailbox contents may have been stolen

A mail account was abused to send spam. The mailbox contents may have been stolen until the account was suspended.

Disclosed

2021-04-09

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. From this time, mass spam began to be sent from the mail account that had been accessed without authorization. [1]

  2. The spam kept being sent until around this time. The mail server management company told the company about the problem. [1]

Impact and response

The mailbox contents may have been stolen before the account was suspended. The number and content of the spam and the information that may have been stolen were not disclosed, and the company said it does not answer individual inquiries. [1]

The company said the account's password may have been easy to guess and changed it. It asked anyone who received mail from this account during the period to delete it without opening it. [1]

Timeline

  1. Started 2021-03-28
  2. Detected 2021-03-29
  3. Disclosed 2021-04-09
  4. 12 days

Attack or cause

Method
[Intrusion]
Impact
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][News]メールアカウントに不正アクセス、情報流出の可能性も - デンヨーSecurity NEXT · 2021-04-09