> JapanHacked_
[Resolved][Severity: Critical][Intrusion]

Hakusensha: malicious code was added to parts of its website, sending visitors to a malicious external site

From the early hours of April 11 to the evening of April 12, malicious code on some pages redirected visitors to a malicious site.

Disclosed

2021-04-14

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. From the early hours, malicious code was added to some pages of the website, so visitors were redirected automatically to a malicious external site. [1] [2]

  2. The tampered state lasted until around this time. [1] [2]

  3. The company announced the case. [2]

Impact and response

The company asked people who visited the website during the period to update their security software, check for infection and remove any malware. It said no personal information of users leaked. It identified the cause, restored the site and said it would strengthen information management. [2]

It would not say more than its announcement when asked, so how the access was found, its cause and what the destination site contained were not disclosed. [1]

Timeline

  1. Started 2021-04-11
  2. Detected 2021-04-12
  3. Disclosed 2021-04-14
  4. 3 days

Attack or cause

Method
[Intrusion]
Impact
[Site defacement]
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][News]白泉社でサイト改ざん、悪意ある外部サイトへ誘導Security NEXT · 2021-04-16
  2. [2][News]白泉社Webサイトに不正アクセス、悪意あるサイトへ誘導する改ざん被害ScanNetSecurity · 2021-04-16 08:00