> JapanHacked_
[Resolved][Severity: Major][Credential abuse]

Dwango: several unauthorized logins to Niconico used passwords leaked from other services

Several unauthorized logins used email and password pairs leaked from other services. The number of accounts was not disclosed.

Disclosed

2021-12-10

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. It announced that it had detected several logins that did not seem to be by the account owners. It said it would block the old passwords of accounts confirmed to be hijacked and send guidance to their registered email addresses. [1] [2]

Impact

If an account is logged into without authorization, the points could be used or bought, the registered email address or password changed, videos or comments posted, and registered data with limited visibility, such as gender and birth date, viewed. The attacker appears to have used email and password pairs leaked from other services. [1] [2]

Timeline

  1. Detected, Disclosed 2021-12-10
  2. 1 days

Organizations involved

Open in organization search

Sources

  1. [1][Official]他社流出パスワードを用いた不正ログインについて(2021/12)DWANGO Co., Ltd. · 2021-12-10
  2. [2][News]ニコニコに複数回の不正ログイン、リスト型攻撃か 「登録情報の見直しを」ITmedia NEWS · 2021-12-10