> JapanHacked_
[Resolved][Severity: Major][Credential abuse][Phishing]

Morisawa: three employees' email accounts were accessed from abroad, and English phishing emails posing as employees were sent

Three employees' email accounts were accessed from abroad, and the contents of the mailboxes may have been read.

Disclosed

2021-07-07

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. From this day, three employees' email accounts were accessed from abroad. [1]

  2. The company noticed when English phishing emails posing as exchanges with employees arrived. Passwords were changed. [1]

  3. It announced the case and contacted partners that may have been affected. [1]

Impact

The contents of the mailboxes may have been read, but no trace of a download was found. [1]

Timeline

  1. Started 2021-05-04
  2. Detected 2021-05-26
  3. Disclosed 2021-07-07
  4. 64 days

Attack or cause

Method
[Credential abuse][Phishing]
Impact
[Fraud]
Entry point
Stolen credentials

Data exposed or at risk

[E-mail address]

Organizations involved

Open in organization search

Sources

  1. [1][News]モリサワのメールアカウントに不正アクセス、従業員とのやり取り装う英文フィッシングメール送信ScanNetSecurity · 2021-07-09 08:00