å°å·ãã ã¡ã¼ã«ã§éã ããã¹ã HTML é»åæ¸ç± PDF ãã¦ã³ãã¼ã ããã¹ã é»åæ¸ç± PDF ã¯ãªããããè¨äºãMyãã¼ã¸ããèªããã¨ãã§ãã¾ã Amazon Web Servicesï¼AWSï¼ã¯ç±³å½æé8æ14æ¥ãæ©æ¢°å¦ç¿æ©è½ãæ´»ç¨ããå社ã®ã¯ã©ã¦ããµã¼ãã¹ãã¾ããã£ã¦ãã¼ã¿ã®èå¥ãåé¡ãä¿è·ãå®æ½ããã»ãã¥ãªãã£ãµã¼ãã¹ãAmazon Macieãã®æä¾ãéå§ããã¨çºè¡¨ããã ãã®ãµã¼ãã¹ã¯ãå人ãç¹å®ã§ããæ å ±ï¼PIIï¼ãç¥ç財ç£ï¼IPï¼ã¨ãã£ãæ©å¯æ å ±ãèå¥ããã¢ã¯ã»ã¹ã移éã«ã¾ã¤ããå¯è¦æ§ãæä¾ãããã®ã ã AWSã«ããã¨ãMacieã¯ãã¼ã¿ã®ã¢ã¯ã»ã¹ãç£è¦ããç°å¸¸ãæ¤ç¥ããã¨ã¨ãã«è¦å ±ãçºåºããããã¼ã¸ããµã¼ãã¹ã ã¨ãããç¾æç¹ã§Macieã¯ãAmazon Simple Storage Serviceãï¼Amazon S3ï¼ããµãã¼ããã¦ããããã®ä»ã®ãã¼ã¿ã¹ãã¢ã§ã
7ææ«ã«ç±³å½ã§éå¬ãããã»ãã¥ãªãã£ã«ã³ãã¡ã¬ã³ã¹ãBlack Hat USA 2017ãã§ã¯ãèªä½ã®ã»ãã¥ãªãã£é¢é£ãã¼ã«ã製åãç´¹ä»ãããArsenalï¼ã¢ã¼ã»ãã«ï¼ãã¨ããå±ç¤ºã¹ãã¼ã¹ãç¨æããã¦ããã ãã®Arsenalã¯ããã¼ã«éçºè èªãããã¼ã¹ã«ç«ã¡ãæè¡è§£èª¬ã質çå¿çãèªç±ã«ã§ããå ´ã ãæ¥å ´è ãã人æ°ã®é«ãã³ã¼ãã¼ã§ãããéçºè ã«ã¨ã£ã¦ãç´æ¥ã¦ã¼ã¶ã¼ããã®åå¿ãåãåã£ã¦ãä»å¾ã®éçºã«æ´»ãããã³ããå¾ãããããã®å¿åæ°ã¯å¹´ã å¢å ãã¦ãããä»å¹´ã¯æ¨å¹´ããã10以ä¸å¤ãã90è¶ ã®ãã¼ã«ãä¸åã«ä»ãããã¨ã¨ãªã£ãã ä»å¹´ããã®Arsenalã«å¿åããçºè¡¨æ ãç²å¾ããæ¥æ¬äººããããNTTã»ãã¥ãªãã£ã»ã¸ã£ãã³ã®ç¾½ç°å¤§æ¨¹æ°ã ãBlack Hatã®ä¼å ´ã§ãç¾½ç°æ°ãéçºãããã¼ã«ã®è©³ç´°ãéçºèæ¯ãªã©ãèããã
ãã¬ã³ããã¤ã¯ãã¯ããå»çæ¥çãç´é¢ãããµã¤ãã¼ç¯ç½ªã¨ãã®ä»ã®è å¨ããå ¬éãããå»çã·ã¹ãã ã®ã»ãã¥ãªãã£ç¶æ³ã«ã¤ãã¦èª¿æ»ããçµæãã¤ã³ã¿ã¼ãããã«é²åºããå»çæ©é¢ã®æ©å¨ãå ¨ä¸çã§10ä¸ä»¶ä»¥ä¸ãã£ãã ãã¬ã³ããã¤ã¯ãã¯2017å¹´7æ26æ¥ãå»çæ¥çã®è å¨ååããªã¹ã¯ç¶æ³ãåæããã¬ãã¼ããå»çæ¥çãç´é¢ãããµã¤ãã¼ç¯ç½ªã¨ãã®ä»ã®è å¨ããå ¬éãããå»çã·ã¹ãã ã®ã»ãã¥ãªãã£ç¶æ³ã«ã¤ãã¦èª¿æ»ããçµæãã¤ã³ã¿ã¼ãããã«é²åºããå»çæ©é¢ã®æ©å¨ãå ¨ä¸çã§10ä¸ä»¶ä»¥ä¸ãã£ãã å社ã¯ãã¤ã³ã¿ã¼ãããã«æ¥ç¶ãã¦ããæ©å¨ã対象ã¨ããæ¤ç´¢ã¨ã³ã¸ã³ãShodanããå©ç¨ããåå¹´2æã«å»çã·ã¹ãã ã®ã»ãã¥ãªãã£ç¶æ³ã«é¢ãã調æ»ãå®æ½ããã®çµæãå»çé¢ä¿ã¨æãããæ©å¨ãªã©10ä¸1394件ããã¤ã³ã¿ã¼ããããä»ãã¦å¤é¨ããç´æ¥ã¢ã¯ã»ã¹ã§ããç¶æ ã ã£ããæ¥æ¬ã®å²åã¯ç´1.8ï¼ ã ã£ãããã«ãããç±³å½ã«æ¬¡ãã§3çªç®ã¨ãª
å°å·ãã ã¡ã¼ã«ã§éã ããã¹ã HTML é»åæ¸ç± PDF ãã¦ã³ãã¼ã ããã¹ã é»åæ¸ç± PDF ã¯ãªããããè¨äºãMyãã¼ã¸ããèªããã¨ãã§ãã¾ã ã¤ã³ã¿ã¼ããããã³ãã³ã°å©ç¨è ã®æ å ±ãçãã ããéä¿¡å 容ãæ¹ããããããããã«ã¦ã§ã¢ã®ãDreamBotãï¼å¥åUrsnifãGoziãªã©ï¼ããä»®æ³é貨ãæ¨çã«ãå§ãããããã ãæ¥æ¬ãµã¤ãã¼ç¯ç½ªå¯¾çã»ã³ã¿ã¼ããã¬ã³ããã¤ã¯ããç¸æ¬¡ãã§æ³¨æãå¼ã³æãã¦ããã DreamBotã¯ãè¿å¹´ã«å½å ã§çå¨ãæ¯ãããã³ãã³ã°ããã¤ï¼ã¤ã³ã¿ã¼ããããã³ãã³ã°ãçãããã¤ã®æ¨é¦¬åãã«ã¦ã§ã¢ï¼ã®1ã¤ãã¤ã³ã¿ã¼ããããã³ãã³ã°å©ç¨è ã®ç«¯æ«ã«ææããå©ç¨è ã®æ å ±ãçªåããããä¸æ£ééãè¡ã£ãããã被害ãå¢ãã¦ããã æ¥æ¬ãµã¤ãã¼ç¯ç½ªå¯¾çã»ã³ã¿ã¼ã®è§£æã«ããã°ã6æ以éãDreamBotã®æ å ±ãçªåãã対象ã«ãä»®æ³é貨åå¼æãã¦ã§ãã¦ã©ã¬ããã®ã¦ã§ããµã¤ãã追å
å°å·ãã ã¡ã¼ã«ã§éã ããã¹ã HTML é»åæ¸ç± PDF ãã¦ã³ãã¼ã ããã¹ã é»åæ¸ç± PDF ã¯ãªããããè¨äºãMyãã¼ã¸ããèªããã¨ãã§ãã¾ã æ¥æ¬IBMã¯ããBankBotãã¨åä»ããã¤ã³ã¿ã¼ããããã³ãã³ã°ãçãããã¤ã®æ¨é¦¬ï¼ãã³ãã³ã°ããã¤ï¼ã¸ã®æ³¨æãå¼ã³æããã20種é¡ä»¥ä¸ã®æ£è¦ã®Androidã¢ããªãè£ ãæå£ã§Google Playããé ä¿¡ãããã¨ããã å社ã«ããã¨ãBankBotã®æ»æè ã¯ãã¾ãç §æã¢ããªããããªè¦è´ã¢ããªãã²ã¼ã ã¢ããªãªã©ä¸è¦ç¡å®³ãªã¢ããªãGoogle Playããé å¸ããã次ã«ãã¦ã¼ã¶ã¼ãã¤ã³ã¹ãã¼ã«ãããããã®ã¢ããªãã¢ãããã¼ãããããã®éã«BankBotã®ãã«ã¦ã§ã¢ã¢ã¸ã¥ã¼ã«ãå¯ãçµã¿è¾¼ãã ããã«ãã£ã¦ã¢ããªããã³ãã³ã°ããã¤ã«å¤åããã¦ã¼ã¶ã¼ã®ç«¯æ«ããèªè¨¼é¢é£ã®æ å ±ãçã¿åããããæ»æè ã¯ãçãã æ å ±ã使ã£ã¦ã¤ã³ã¿ã¼ããããã³ãã³ã°ã¸
å°å·ãã ã¡ã¼ã«ã§éã ããã¹ã HTML é»åæ¸ç± PDF ãã¦ã³ãã¼ã ããã¹ã é»åæ¸ç± PDF ã¯ãªããããè¨äºãMyãã¼ã¸ããèªããã¨ãã§ãã¾ã ãã¬ã³ããã¤ã¯ãã¯8æ14æ¥ããã«ã¦ã§ã¢ãJS_POWMETãã®è§£æçµæãå ¬è¡¨ããã»ã¼å®å ¨ãªããã¡ã¤ã«ã¬ã¹ãã«ã¦ã§ã¢ããçµè«ä»ããããã¡ã¤ã«ã¹ãã£ã³ã§ã¯æ¤ç¥ãããªããã¨ãããå¯ãã«ä¾µå ¥ãããã«ã¦ã§ã¢ã¸ã®æ³¨æãå¼ã³æãã¦ããã ãã¡ã¤ã«ã¬ã¹ãã«ã¦ã§ã¢ã¯ãã³ã³ãã¥ã¼ã¿ã¸ã®ä¾µå ¥ãææãæ»æãªã©ã®éã«å®è³ªçã«ãã¡ã¤ã«ã®å½¢æ ãä¼´ããããã¡ã¤ã«ã¹ãã£ã³ã使ãã»ãã¥ãªãã£ã½ããã§ã¯æ¤ç¥ã§ããªãããããµã¤ãã¼æ»æè ãæ¤ç¥ãåé¿ããç®çã§ä½¿ç¨ããããã ãããã¾ã§ã¯ãã«ã¦ã§ã¢æ¬ä½ãèµ·åããããã®ã³ã¼ããªã©ããªãããã®ãã¡ã¤ã«ãã©ããã®æ®µéã§ä½æããããã¨ããããå®è¡å¯è½ãªç¶æ ã®ãã«ã¦ã§ã¢æ¬ä½ããã¡ã¤ã«ã¨ãã¦ä¿åãããªãç¶æ ãã¨ããæå³ã ã£ãã å社ã解æã
å ¬å¼ã¹ãã¢ã§ãããGoogle Playããå«ããAndroidãã®å種ã¢ããªã¹ãã¢ã«ã1000件ãè¶ ããã¹ãã¤ã¦ã§ã¢ã¢ããªãããã«ã¼ãã«ãã£ã¦é ç½®ããã¦ãããææãã端æ«ã®ã»ã¼ãã¹ã¦ã®åä½ãç£è¦ã§ããã¢ããªã ã SonicSpyã¨åä»ãããããã«ã¦ã§ã¢ã¯ãé話ãé³å£°ã®é²é³ãåçã®æ®å½±ãæ»æè ãæå®ããçªå·ã¸ã®é話ã®çºä¿¡ãããã¹ãã¡ãã»ã¼ã¸ã®éä¿¡ãé話ãã°ãé£çµ¡å ãWi-Fiã¢ã¯ã»ã¹ãã¤ã³ãã«é¢ããæ å ±ã®ç£è¦ããã²ããã«è¡ããã¨ãã§ããã SonicSpyã¯ãå ¨é¨ã§73ã®ç°ãªãã³ãã³ããå®è¡ããããã«ãªã¢ã¼ãããæ示å¯è½ã§ãã¤ã©ã¯ã®ãã«ã¦ã§ã¢éçºè ããä½æãããã®ã¨æãããã ã¡ãã»ã¼ã¸ã³ã°ã¢ããªã±ã¼ã·ã§ã³ã¨ãã¦æä¾ããã¦ãããã®ãã«ã¦ã§ã¢ã¯ãã¦ã¼ã¶ã¼ããã¦ã³ãã¼ããçããªãããã«ãè½æ¸ãã©ããã®ã¡ãã»ã¼ã¸ã³ã°æ©è½ãå®è¡ããããããã¨åæã«ãã¦ã¼ã¶ã¼ã®ãã¼ã¿ãçã¿ãC&Cãµã¼ãã«è»¢éããã
âãµã¤ãã¼è è¿«ï¼Cyber Extortionï¼âã¨ããã°ãå°ãåã«çå¨ãæ¯ãã£ããWannaCryãã®ãããªãã©ã³ãµã ã¦ã¨ã¢ãæãæµ®ãã¹ãã ããããã½ã³ã³å ã®ãã¡ã¤ã«ãæå·åããå ã«æ»ããããã°ééï¼ãããã³ã¤ã³ï¼ãæ¯æãããè è¿«ããã ã ãããµã¤ãã¼ç©ºéã§ã®è è¿«ã¯ã©ã³ãµã ã¦ã¨ã¢ã ãã§ã¯ãªããWebãµã¼ãã¼ã«DDoSæ»æãä»æãããæ»æãããã¦ã»ãããã°ééãæ¯æããã¨è ããµã¤ãã¼è è¿«ãããããDDoSè è¿«ï¼DDoS Extortionï¼ããªã©ã¨å¼ã°ãããDDoSæ»æã¨ã¯ãå¤æ°ã®ãã½ã³ã³ï¼ç«¯æ«ï¼ãã大éã®ãã¼ã¿ãä¸æã«éä¿¡ãã¦ãWebãµã¼ãã¼ãªã©ãå©ç¨ä¸è½ã«ããæ»æã DDoSè è¿«ã¯10年以ä¸åãã話é¡ã«ãªã£ã¦ãããç¾å¨ã§ã大ããªè å¨ã§ãããã©ã³ãµã ã¦ã¨ã¢ã°ããã«æ°ãåããã¦ã¯ãããªãã ä¸å½ãéå½ã®éèæ©é¢ãè è¿« DDoSè è¿«ã«é¢ããæè¿ã®è©±é¡ã¨ãã¦ã¯ã2017å¹´6ææ«ã«å½å ã®ã»ãã¥ãª
ä¸å½ãããé販æ大æã®ã¢ãªããéå£ï¼æµæ±çï¼ã¯æ¥æ¥ã«ããæ¥æ¬ã§ã¹ãã¼ããã©ã³ï¼ã¹ããï¼ã使ã£ãé»å決æ¸ãµã¼ãã¹ãå§ãããå ¥éããã¹ããã®ã¢ããªã§è²·ãç©ãã§ããããã«ãããä¸å½ã§æä¾ãããæ¯ä»å®ï¼ã¢ãªãã¤ï¼ãã¨åãä»çµã¿ãæ¥æ¬äººåãã«å±éã3å¹´å ã«1åä¸äººã®å©ç¨ãç®æããæ¥æ¬ã®ã¹ãã決æ¸å¸å ´ã®èµ·çå¤ã«ãªãå¯è½æ§ããããä¸å½ã¯ã¹ããã«ãã決æ¸ãä¸çã§æãæ®åãã¦ãããã¢ãªãã¤ã¨é¨°è¨æ§è¡ï¼ãã³ã»ã³ã
ã©ã³ãã³ã°
ã©ã³ãã³ã°
ã©ã³ãã³ã°
ãªãªã¼ã¹ãé害æ å ±ãªã©ã®ãµã¼ãã¹ã®ãç¥ãã
ææ°ã®äººæ°ã¨ã³ããªã¼ã®é ä¿¡
j次ã®ããã¯ãã¼ã¯
kåã®ããã¯ãã¼ã¯
lãã¨ã§èªã
eã³ã¡ã³ãä¸è¦§ãéã
oãã¼ã¸ãéã
{{#tags}}- {{label}}
{{/tags}}