> JapanHacked_
[Resolved][Severity: Major][Malware]

NTT West: a PC used for work commissioned by the Aichi Prefectural University Corporation was infected with Emotet and email addresses leaked

A PC used for commissioned work was infected with Emotet and email addresses of university staff and business partners leaked.

Disclosed

2022-03-07

Organizations involved

2

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. The person responsible for maintaining and operating the information network under contract ran a macro in a file attached to a business email. Information is thought to have leaked at this point. [1] [2]

  2. Suspicious mail posing as the person reached the corporation's staff. The PC at risk of infection was cut off from the network and staff and others were told not to open attachments. [1] [2]

  3. NTT West announced the case. [2]

  4. The Aichi Prefectural University Corporation announced the case. [1]

Impact

Email addresses and similar data of the corporation's staff and others who exchanged mail with that PC may have leaked. No secondary damage has been confirmed. [1] [2]

Timeline

  1. Started 2022-03-01
  2. Detected 2022-03-02
  3. Disclosed 2022-03-07
  4. 6 days

Attack or cause

Method
[Malware]
Impact
[Data leak][Fraud]
Entry point
E-mail

Data exposed or at risk

[E-mail address][Name]

Supply chain

NTT WEST, Inc.

[Breached]

Organizations listed on this site
2

Organizations involved

Open in organization search

Sources

  1. [1][Official]ウイルス感染による個人情報の漏えいについてAichi Prefectural University Corporation · 2022-03-08
  2. [2][News]NTT西がEmotet感染　受託業務で使用したPCから従業員・取引先メールアドレス流出ITmedia NEWS · 2022-03-08