EIZO: the email account of a local employee abroad was hijacked and used to send 620 targeted attack emails leading to a phishing site

1. 2021-08-06

   It confirmed that a targeted attack email leading to a credential-stealing phishing site had gone from a local employee's account abroad to 620 recipients in Japan and abroad, 194 of them outside the company. [1]

2. 2021-08-18

   It announced the case, apologized to outside recipients and warned staff. [1]

For about 45 minutes between the hijack and the suspension of the account, the attacker could reach 3,130 email addresses (987 outside the company) and 1,053 sent and received emails of the employee. Communication log analysis confirmed that none were downloaded. [1]