Meiji Gakuin University: psychology faculty website altered to show visitors a fake check page

On 5 November Meiji Gakuin disclosed that a third party had used an administrator account of Meiji Gakuin University Faculty of Psychology website and planted malicious code on the site. Visitors from the night of 16 October to about noon on 19 October may have seen malicious pages or code. The university took the site offline and asked outside specialists to investigate. [1]

Mac visitors were shown a fake "not a robot" check asking them to run a command, and devices on iOS or iPadOS 18.5 or earlier faced separate malicious code. The investigation found no personal data leak, and the psychological clinic site on the same domain was not affected. The university asked visitors in that period to check their devices and update their OS. [1]

How the administrator account was obtained has not been disclosed. The university is removing the code, changing credentials and strengthening login authentication, and will reopen the site once it is confirmed safe. [1]