> JapanHacked_
[Resolved][Severity: Moderate][Web app exploit]

Tohoku Institute of Technology: the Faculty of Life Design website was attacked through a CMS vulnerability and an obfuscated malicious script was planted

On a department introduction site, a CMS vulnerability was exploited and files were rewritten. No personal data was stored there.

Disclosed

2021-12-22

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. The period in which the defacement could have had an effect began around 00:25. [1]

  2. It closed the site at 18:54 and began an investigation. [1]

  3. At 11:40 it reopened the site rebuilt with countermeasures. [1]

  4. It announced the case. [1]

Impact

Suspicious processes, rewritten files and suspicious files were found, including an obfuscated malicious script that could affect visitors. The period of possible impact ran from 00:25 on November 8 to 18:54 on November 30, 2021. Only already public information was stored there, so no personal data leaked. [1]

Timeline

  1. Started 2021-11-08
  2. Detected 2021-11-30
  3. Disclosed 2021-12-22
  4. 44 days

Attack or cause

Method
[Web app exploit]
Impact
[Site defacement]
Entry point
Web app

Data exposed or at risk

–

Organizations involved

Open in organization search

Sources

  1. [1][Official]学科紹介Web サイトの改ざんについてTohoku Institute of Technology · 2021-12-22