Mitsubishi Electric discloses security breach, China is main suspect

guest · Jan 20, 2020

Mitsubishi Electric discloses security breach, China is main suspect
January 20, 2020
https://www.zdnet.com/article/mitsubishi-electric-discloses-security-breach-china-is-main-suspect/

In a short statement published today on its website, Mitsubishi Electric, one of the world's largest electronics and electrical equipment manufacturing firms, disclosed a major security breach.
Although the breach occurred last year, on June 28, and an official internal investigation began in September, the Tokyo-based corporation disclosed the security incident today, only after two local newspapers, the Asahi Shimbun and Nikkei, published stories about the hack.

Both publications blamed the intrusion on a Chinese-linked cyber-espionage group named Tick (or Bronze Butler), known to the cyber-security industry for targeting Japan over the past few years [1, 2, 3, 4, 5, 6, 7, 8, 9, 10].
HACK ORIGINATED FROM A CHINESE AFFILIATE
According to the reports in local media, the intrusion was detected after Mitsubishi Electric staff found a suspicious file on one of the company's servers.

The newspaper said hackers escalated their access from this initial entry point to Mitsubishi Electric's internal systems, gaining access to the networks of around 14 company departments, such as sales and the head administrative office.
Click to expand...

guest · Jan 21, 2020

Mitsubishi Electric Blames Anti-Virus Bug for Data Breach
Hackers Exploited AV Software Zero-Day Vulnerability Before Vendor Patched Flaw
January 21, 2020
https://www.inforisktoday.com/mitsubishi-electric-blames-anti-virus-bug-for-data-breach-a-13628

There's irony, of course, in a company falling victim to a data breach because attackers exploited its security software. But security researchers have continually warned that security software is like any other software, in that it can contain unknown vulnerabilities that hackers can sometimes exploit to their own advantage
Hackers Erased Log Files
The Japanese firm says that after it detected unauthorized access, it restricted external access to its systems. But the resulting investigation was hampered by a lack of log files, which the company says "were erased by the hackers."

Left unanswered by Mitsubishi Electric is the question of what anti-virus software the company uses, the timeline of the attack, or how long it took the company to detect the intrusion after it happened. Mitsubishi Electric didn't respond to a query from Information Security Media Group.
Click to expand...

But a case study from 2015 published by Trend Micro says that Mitsubishi Electric Information Systems Corp., which oversees IT for Mitsubishi Electric Group, used some of its products. Trend Micro didn't respond to a request for comment.
Mitsubishi Electric Has Used Trend Micro
According to the 2015 case study [...] The age of the case study, however, means that Mitsubishi Electric may have long moved on from using Trend Micro's products. Also, large companies tend to use a variety of security products, so the problem could lie elsewhere.
Click to expand...

guest · Jan 24, 2020

Left unanswered by Mitsubishi Electric is the question of what anti-virus software the company uses [...]
Click to expand...

Trend Micro antivirus zero-day used in Mitsubishi Electric hack
January 24, 2020
https://www.zdnet.com/article/trend-micro-antivirus-zero-day-used-in-mitsubishi-electric-hack/

Chinese hackers have used a zero-day in the Trend Micro OfficeScan antivirus during their attacks on Mitsubishi Electric, ZDNet has learned from sources close to the investigation.
THE ZERO-DAY
The only technical detail in relation to the hack Mitsubishi Electric disclosed was the fact that hackers exploited a vulnerability in one of the antivirus products the company was using.
A source with knowledge of the attack told ZDNet that the hackers exploited CVE-2019-18187, a directory traversal and arbitrary file upload vulnerability in the Trend Micro OfficeScan antivirus.

Japanese media claimed that the intrusion was the work of a Chinese state-sponsored cyber-espionage group known as Tick.
Trend Micro declined to comment for this article.
Click to expand...

guest · May 20, 2020

Japan suspects missile data leak in Mitsubishi cyberattack
May 20, 2020
https://www.seattletimes.com/business/japan-suspects-missile-data-leak-in-mitsubishi-cyberattack/

Japan is investigating a possible leak of data including details of a prototype missile in a massive cyberattack earlier this year on Mitsubishi Electric Corp., officials said Wednesday.

The suspected leak involves sensitive information about a prototype of a cutting-edge high speed gliding missile intended for deployment for the defense of Japan’s remote islands amid China’s military assertiveness in the region.
The ministry suspects the information might have been stolen from documents sent from several defense equipment makers as part of a bidding process for the project, Mitsubishi Electric did not win the bid, Japanese media reports said.
Click to expand...

Mitsubishi said in a statement Wednesday that it had reported to the Defense Ministry in February a possible leak of sensitive information related to a cyberattack earlier this year. Mitsubishi has acknowledged that its personal data on some 8,000 people also might have been leaked.
The company said it is continuing to cooperate with in the investigation, while pledging to step up its information security.
Click to expand...

guest · Nov 20, 2020

Mitsubishi Elec Suffers Leaks of Biz Partners' Bank Account Info
November 20, 2020
https://jen.jiji.com/jc/eng?g=eco&k=2020112001172

Japan's Mitsubishi Electric Corp. <6503> said Friday that information on bank accounts held by its domestic business partners has been breached as a result of an unauthorized access to a cloud-based service it uses.
The major electric and heavy machinery maker has so far confirmed information leaks for 8,635 bank accounts. It is investigating details of the hack.
Click to expand...

The information breaches added to the revelation in January of the possibility of defense-related information managed by Mitsubishi Electric being leaked due to cyberattacks that hit the firm's internal computer network last year. The company is thus expected to come under stronger pressure to tighten its information security.

Mitsubishi Electric first recognized the unauthorized access on Monday. It later confirmed that the hacker in the guise of a Mitsubishi Electric employee saw multiple files and downloaded a file containing bank account information.
Click to expand...

Log in or Sign up

Mitsubishi Electric discloses security breach, China is main suspect

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

Mitsubishi Electric discloses security breach, China is main suspect

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches