Hakusensha: malicious code was added to parts of its website, sending visitors to a malicious external site
From the early hours of April 11 to the evening of April 12, malicious code on some pages redirected visitors to a malicious site.
Disclosed
2021-04-14
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
Impact and response
The company asked people who visited the website during the period to update their security software, check for infection and remove any malware. It said no personal information of users leaked. It identified the cause, restored the site and said it would strengthen information management. [2]
It would not say more than its announcement when asked, so how the access was found, its cause and what the destination site contained were not disclosed. [1]
Timeline
- Started 2021-04-11
- Detected 2021-04-12
- Disclosed 2021-04-14
- 3 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Site defacement]
- Entry point
- Unknown
Data exposed or at risk
–
Organizations involved
[Breached][Critical]Tokyo, ChiyodaInformation and communications
Hakusensha Inc.
Sources
- [1][News]白泉社でサイト改ざん、悪意ある外部サイトへ誘導Security NEXT · 2021-04-16
- [2][News]白泉社Webサイトに不正アクセス、悪意あるサイトへ誘導する改ざん被害ScanNetSecurity · 2021-04-16 08:00