Security information

If your laboratory operates a web server and uses a CMS (WordPress, Movable Type, etc.), please check for suspicious access.

In Japan, incidents such as the embedding of malicious content, mass transmission of phishing e-mails, and unauthorized intrusion into servers have occurred.

Please take measures such as managing passwords for the web server you are using, updating vulnerable software, and stopping unnecessary services.

WordPress Vulnerability Information

https://jvndb.jvn.jp/search/index.php?mode=_vulnerability_search_IA_VulnSearch&lang=en&keyword=wordpress

Movable Type Vulnerability Information

https://jvndb.jvn.jp/search/index.php?mode=_vulnerability_search_IA_VulnSearch&lang=en&keyword=Movable+Type

不審なアクセスを発見した場合は、SIT-CSIRTに連絡してください。
SIT-CSIRT (Shibaura Institute of Technology Computer Security Incident Response Team)
Email: csirt@shibaura-it.ac.jp
 

Recently, phishing e-mails posing as e-mail systems have been sent to many organizations.

Subject Example: 

• Announcement of the second release of the mail plan and security enhancements
• [Important] Notice of Service Restoration for XX/XX/XXXX(X), 2021.
• Important] Notice of Service Suspension due to Usage Restrictions - {email address}
• [Important] Notice of service suspension - {email address}
• [Important] Notice of Termination of Email Delivery - {email address}
• [Important] Notice of Termination of Email Connection Service_shibaura-it.ac.jp] - {email address}
• [Notice] [Notice from _shibaura-it] _{email address}
• [Upgrade] Notice of maintenance work

The following screen is not the login screen for the system used by the university.

Never enter your email address or password.

Please contact the Information System Division if you have inadvertently typed something.

We have received a report that phishing e-mails are being sent to several e-mail addresses of the University of Tokyo at around 8:33 a.m. on September 29, 2021, falsely claiming to be notices of maintenance work on the Webmail system.

If you enter your user name and password into this site, your credentials may be exploited and unauthorized access may be gained.

If you have inadvertently entered your username and password, please change your password and contact the Information System Division.

If you have inadvertently entered your username and password, please change your password and contact the Information System Division.

・Example subject line(Japanese)

・Example of main text(Japanese)

・Example of a phishing site screen

We have received several inquiries like this.

"When browsing internet sites, screens such as "Access to this PC is blocked for security reasons" or "Windows was blocked due to suspicious activity" are displayed with alarm sounds."

Both will prompt you to call a phone number starting with 050, and when you call, you will be instructed to install remote control software or go to a convenience store to buy a prepaid card.
This is a support scam.

Virus infection warning and support phone number displayed
https://www.keishicho.metro.tokyo.jp/sodan/nettrouble/jirei/warning_screen.html

Click here for how to close the fake warning screen.
Microsoft :
https://news.microsoft.com/ja-jp/2021/01/29/210129-information/

If the display does not stop even after closing the browser, please contact SIT Center for Science Information.
How to contact us :
https://web.sic.shibaura-it.ac.jp/otoiawase?lang=en

We've received calls that suspicious emails with attachments were sent to SIT email addresses from 2020/07/08 1:55.

This attached file make your computer infected to ransomwarewhen you open the file.

When you receive this email, please delete the email WITHOUT open/download attached file.

When you inadvertently open the attached file, please call Center for Science Information!

Examples of Subject

• I like this photo
• I love this photo!
• Is this you?
• Is this your photo?
• Look at this photo!
• My favourite photo!
• Photo just for you
• You like this photo?
• You look good here
• Your new photo?

Examples of attatched file name
IMG[Numbers].jpg.js.zip