Nikkei breach: hijacked account sent 9,000 phishing emails
Japanese media group Nikkei has disclosed two separate security incidents involving employee email accounts. In the more serious one, an attacker took over a staff member's Microsoft 365 account and used it to send phishing emails to journalistic sources.
The company announced both incidents on Sunday. Several other large Japanese companies have reported breaches in recent weeks.
Around 9,000 phishing emails from a trusted address
In the latest incident, the attacker gained access to the Microsoft 365 account of a Nikkei employee. Microsoft 365 is the cloud-based office and email suite that many organizations use. From that account, the attacker sent about 9,000 phishing emails on September 30.