Paramount Bed: an employee's virtual desktop was infected with malware, and addresses and bodies of past emails may have leaked, with suspicious emails reusing those messages sent out
An employee's virtual desktop was infected with malware. Suspicious emails reusing the contents of past messages were sent to business partners and others.
Disclosed
2021-06-15
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
Impact
Email addresses and bodies stored on the device may have leaked. The suspicious emails did not use an employee's name as sender. They had English text, and garbled sections that seemed to quote past messages showed related email addresses. Some carried attachments. The type of malware, the extent of the leak and the number of emails sent were under investigation. The company contacted customers whose addresses or message bodies may have leaked and reported to and consulted the Personal Information Protection Commission. It asked recipients of suspicious emails to delete them without opening URLs or attachments. [1] [2]
Timeline
- Started 2021-06-07
- Detected 2021-06-09
- Disclosed 2021-06-15
- 8 days
Attack or cause
- Method
- [Malware]
- Impact
- [Data leak]
- Entry point
- Unknown
Data exposed or at risk
Organizations involved
[Breached][Major]Tokyo, KotoManufacturing
Paramount Bed Co., Ltd.
Sources
- [1][News]仮想デスクトップがマルウェア感染、メール流出の可能性 - パラマウントベッドSecurity NEXT · 2021-06-18
- [2][News]パラマウントベッド従業員の仮想デスクトップ環境がウイルス感染、過去のやりとりを装った不審メールを確認ScanNetSecurity · 2021-06-18 08:00