Niigata University of Health and Welfare: a CMS vulnerability was exploited and its website was tampered with, redirecting visitors to a malicious site

1. 2023-04-01

   From about 20:51 to 22:10 opening the site sent visitors automatically to a malicious site. Around 21:40 it saw a possible unauthorized access, and at 22:10 it closed the site and began investigating. After emergency measures such as virus checks it lifted the closure at 0:48 the next day and finished restoring at 3:55. [1] [2]

2. 2023-04-03

   It identified the cause, took measures and announced the restoration. [1] [2]

The CMS used to update the site was accessed from outside without authorization and files on the web server were rewritten. The site handles no personal data, so nothing leaked. Virus checks of all files on the server found nothing. No damage has been reported. [1]