> JapanHacked_
[Resolved][Severity: Moderate][Credential abuse]

Kobe Kaisei Women's College: the credentials of one department email account were stolen and it was used from outside to send about 10,000 spam emails

One department account was stolen, and about 10,000 spam emails went out in about three hours. No leak of information was confirmed.

Disclosed

2021-08-26

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. From about 22:00, spam emails began to be sent from the department's email account through unauthorized access from outside. It lasted until 01:14 on August 25, and about 10,000 emails were sent. [1]

  2. It announced the case and apologized to those who received the spam. It will remind the whole college about managing accounts and passwords. [1] [2]

Timeline

  1. Started 2021-08-24
  2. Detected 2021-08-25
  3. Disclosed 2021-08-26
  4. 2 days

Attack or cause

Method
[Credential abuse]
Impact
Entry point
Stolen credentials

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]不正アクセスによる迷惑メール送信についてKobe Kaisei Women's College · 2021-08-26
  2. [2][News]神戸海星女子学院大学のメールアカウントを踏み台に数万件の迷惑メール送信ScanNetSecurity · 2021-08-30 09:00