> JapanHacked_
[Investigating][Severity: Major][Malware]

Paramount Bed: an employee's virtual desktop was infected with malware, and addresses and bodies of past emails may have leaked, with suspicious emails reusing those messages sent out

An employee's virtual desktop was infected with malware. Suspicious emails reusing the contents of past messages were sent to business partners and others.

Disclosed

2021-06-15

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. One virtual desktop environment used for work was infected with malware. [1]

  2. It noticed the infection. It confirmed that suspicious emails reusing messages previously exchanged with the employee were being sent by a third party to several people concerned. [1] [2]

  3. It announced the case. [2]

Impact

Email addresses and bodies stored on the device may have leaked. The suspicious emails did not use an employee's name as sender. They had English text, and garbled sections that seemed to quote past messages showed related email addresses. Some carried attachments. The type of malware, the extent of the leak and the number of emails sent were under investigation. The company contacted customers whose addresses or message bodies may have leaked and reported to and consulted the Personal Information Protection Commission. It asked recipients of suspicious emails to delete them without opening URLs or attachments. [1] [2]

Timeline

  1. Started 2021-06-07
  2. Detected 2021-06-09
  3. Disclosed 2021-06-15
  4. 8 days

Attack or cause

Method
[Malware]
Impact
[Data leak]
Entry point
Unknown

Data exposed or at risk

[E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][News]仮想デスクトップがマルウェア感染、メール流出の可能性 - パラマウントベッドSecurity NEXT · 2021-06-18
  2. [2][News]パラマウントベッド従業員の仮想デスクトップ環境がウイルス感染、過去のやりとりを装った不審メールを確認ScanNetSecurity · 2021-06-18 08:00