> JapanHacked_
[Resolved][Severity: Major][Credential abuse]

Unimedia: its hometown-tax support site "Furusato Premium" was hit by a password list attack

An anomaly on the admin screen revealed a huge number of password list attacks. The same day it added a blocking mechanism and force-reset passwords.

Disclosed

2022-03-02

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. At 1 pm it noticed an anomaly on the admin screen of "Furusato Premium" and found disk usage had reached 100%. Investigating the cause, it found it may have been hit by a huge number of password list attacks. The same day it introduced a mechanism to block the attacks and forced a password reset. [1]

  2. It published the investigation result. [1]

Timeline

  1. Detected 2022-02-17
  2. Disclosed 2022-03-02
  3. 13 days

Attack or cause

Method
[Credential abuse]
Impact
[Fraud]
Entry point
Stolen credentials

Data exposed or at risk

[Passwords]

Organizations involved

Open in organization search

Sources

  1. [1][News]「ふるさとプレミアム」にパスワードリスト型攻撃、発覚日に遮断システム導入とパスワード強制リセット実施ScanNetSecurity · 2022-03-09 08:05