> JapanHacked_
[Resolved][Severity: Moderate][Intrusion]

Takarazuka University: its website was accessed without authorization and search-result visitors were redirected to unrelated sites

Visitors arriving from search sites were redirected to unrelated sites, and the university closed the site twice. It denied any personal data leak.

Disclosed

2021-11-27

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. In the morning it noticed that visitors from search sites were redirected to unrelated sites. A phishing site was suspected, so it closed the site. [1] [2]

  2. Around 15:30 it restored the site temporarily. [1]

  3. The same problem occurred again in the morning. It closed the site again, re-examined the malicious files and reopened it at 16:00. [1]

  4. It announced the case. [2]

Impact

Visitors who typed the URL directly or used a bookmark were not affected. The university denies that any personal data leaked in this case. [1]

Timeline

  1. Started, Detected 2021-11-23
  2. Disclosed 2021-11-27
  3. 4 days

Attack or cause

Method
[Intrusion]
Impact
[Site defacement][Service outage]
Entry point
Unknown

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][News]サイトが侵害被害、検索サイト経由で無関係サイトにリダイレクト - 宝塚大Security NEXT · 2021-11-30
  2. [2][News]宝塚大学へ不正アクセス、検索結果から無関係なサイトへリダイレクトされる事象が2度も発生ScanNetSecurity · 2021-11-30 08:05