Two major Internet portals in Japan were hacked this week, compromising thousands, possibly millions of their users’ accounts. Goo, owned by network operator NTT, said that as many as 100,000 of their user accounts were compromised while Yahoo Japan reported a malicious program on their servers.
Goo locked down their users’ accounts after experiencing a series of “brute-force” attacks on Tuesday evening. Some accounts, which contained financial details like credit card and bank account information, were bombarded by login attempts, some at 30 attempts per second. They were able to trace some of the attacks from certain IP addresses. They also confirmed that some of the accounts were accessed by the hackers. Goo accounts for less than 1% of Internet users in Japan, but was an especially popular web portal a decade ago. Included in its portal are some shopping services, hence the financial details in most of their accounts.
Yahoo Japan meanwhile, discovered a malicious program on their company servers on Tuesday evening as well. It managed to extract the user data for 1.27 million users but they were able to stop before it leaked out of their servers. They said they are looking into the incident and will take steps to ensure it will not happen again. Yahoo, owned by Softbank, accounts for over 55% of the search and portal use in Japan.
There is no indication as of yet that the two attacks were related in any way.
[ via ComputerWorld ]