Investigation of personal information leakage due to malware infection

Project background/overview

Background of discovery:
It was discovered that a company's PC was infected with malware.Since there was an event that was suspected of leaking personal information, FRONTEO was requested to investigate.

We were asked to identify the infection route and trace any traces of information leaks from the identified infected device.As the source of infection is unknown, only several hundred devices are being investigated.It became.

Survey method

• Targeting hundreds of investigation terminals, we conducted analysis using an analysis tool together with a research cooperation company, visualized the attack route, and identified the victim terminals.

• In addition, a survey was conducted on nearly 30 cyber black markets to see if leaked information is being bought and sold on the dark web.

Achievement

The PC where the information leak occurred can be identified.Information leaked to the dark webI was able to pinpoint what I was doing.

*Dark Web: Major marketplaces where illegal goods are traded, major forums where cyber criminals gather, and major search services related to the black market.

FRONTEO has a tie-up with a cyber security specialist that also conducts dark web surveys, so it is possible to conduct a one-stop thorough survey.

Partner companies: Sprout Co., Ltd. ,Cipharma Co., Ltd.

Introduction of similar cases

Leakage of personal information from outsourced companies
* Membership registration (free) is required to watch the video.