[B! Flame] mi1kmanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

mi1kman id:mi1kman

Flameã«é–¢ã™ã‚‹mi1kmanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã€ŒWindows Updateã€ã‚’ãƒãƒƒã‚ãƒ³ã‚°ã™ã‚‹ã€ŒFlameã€ãƒžãƒ«ã‚¦ã‚§ã‚¢ã€åˆ¶ä½œã«ã¯ä¸–ç•Œãƒˆãƒƒãƒ—ã‚¯ãƒ©ã‚¹ã®æš—å·è§£æžæŠ€è¡“ãŒå¿…è¦ã¨ç ”ç©¶è€… - ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ - TECHNOLOGY - CIO Online
ã€ŒWindows Updateã€ã‚’ãƒãƒƒã‚ãƒ³ã‚°ã™ã‚‹ã€ŒFlameã€ãƒžãƒ«ã‚¦ã‚§ã‚¢ã€åˆ¶ä½œã«ã¯ä¸–ç•Œãƒˆãƒƒãƒ—ã‚¯ãƒ©ã‚¹ã®æš—å·è§£æžæŠ€è¡“ãŒå¿…è¦ã¨ç ”ç©¶è€… Flameã«æœªçŸ¥ã®MD5è¡çªæ”»æ’ƒäºœç¨®ãŒç”¨ã„ã‚‰ã‚Œã¦ã„ãŸã“ã¨ãŒæ˜Žã‚‹ã¿ã« 2012/06/11 ã‚ªãƒ©ãƒ³ãƒ€ã®æ•°å¦ãŠã‚ˆã³ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ç§‘å¦å›½ç«‹ç ”ç©¶ã‚»ãƒ³ã‚¿ãƒ¼ï¼ˆCWIï¼‰ã«æ‰€å±žã™ã‚‹å°‚é–€å®¶ã‚‰ã¯6æœˆ7æ—¥ã€ã‚µã‚¤ãƒãƒ¼è«œå ±ãƒžãƒ«ã‚¦ã‚§ã‚¢ã€ŒFlameã€ãŒã€ã“ã‚Œã¾ã§çŸ¥ã‚‰ã‚Œã¦ã„ãªã‹ã£ãŸæš—å·æ”»æ’ƒã®äºœç¨®ã‚’åˆ©ç”¨ã—ã¦ã„ã‚‹ã“ã¨ã€åŒæ”»æ’ƒãƒ„ãƒ¼ãƒ«ã‚’é–‹ç™ºã™ã‚‹ã«ã¯ä¸–ç•Œãƒ¬ãƒ™ãƒ«ã®æš—å·è§£æžæŠ€è¡“ãŒå¿…è¦ã§ã‚ã‚‹ã“ã¨ã‚’æ˜Žã‚‰ã‹ã«ã—ãŸã€‚ Flameã®åˆ¶ä½œè€…ã¯ã€MD5é¸æŠžãƒ—ãƒ¬ãƒ•ã‚£ãƒƒã‚¯ã‚¹è¡çªã¨ç§°ã•ã‚Œã‚‹æš—å·æ”»æ’ƒã‚’ç”¨ã„ã¦æ‚ªè³ªãªMicrosoftãƒ‡ã‚¸ã‚¿ãƒ«ãƒ»ã‚³ãƒ¼ãƒ‰ã‚µã‚¤ãƒ‹ãƒ³ã‚°è¨¼æ˜Žæ›¸ã‚’ç”Ÿæˆã—ã€è‡ªã‚‰ã‚’Microsoftã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã«å½è£…ã—ã¦Windowsã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã¸ãƒžãƒ«ã‚¦ã‚§ã‚¢ã‚’é€ã‚Šè¾¼ã‚“ã§ã„ã‚‹ã€‚ Microsoftã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ»ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã‚‰ãŒã€6æœˆ6æ—¥ä»˜
mi1kman 2012/06/12
ãƒžãƒ«ã‚¦ã‚§ã‚¢

Flame

Microsoft

æš—å·
ãƒªãƒ³ã‚¯
Endpoint Protection - Symantec Enterprise
W32.Flamer has built-in modules to gather an enormous amount of information from compromised computers, well beyond that of any threat seen previously. These modules, referred to as 'apps' by the threat, are downloadable and updatable by the threat from an 'app store', as described in a previous blog. Flamer may initially collect some preliminary information andâ€”only based on that informationâ€”proc
mi1kman 2012/06/05
Symantec

ãƒžãƒ«ã‚¦ã‚§ã‚¢

Flame
ãƒªãƒ³ã‚¯
Endpoint Protection - Symantec Enterprise
Microsoft ã¯ Flamer ã«é–¢é€£ã—ã¦ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¢ãƒ‰ãƒã‚¤ã‚¶ãƒªï¼ˆ2718704ï¼‰ã‚’å…¬é–‹ã—ã¾ã—ãŸã€‚Flamer ã§ã¯ã€ã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆã®ç½²åã« Microsoft æä¾›ã®è¨¼æ˜Žæ›¸ãŒä½¿ã‚ã‚Œã¦ãŠã‚Šã€ã“ã®è¨¼æ˜Žæ›¸ã¯ä¿¡é ¼ã§ãã‚‹ Microsoft Root Authority ã«é€£éŽ–ã—ã¦ã„ã¾ã™ã€‚ã“ã®ãŸã‚ã€ã“ã‚Œã‚‰ã®ç½²åæ¸ˆã¿ã®ã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆã¯ã€ã‚ãŸã‹ã‚‚ Microsoft ã‹ã‚‰æä¾›ã•ã‚Œã¦ã„ã‚‹ã‚ˆã†ã«è¦‹ãˆã¾ã™ã€‚ Microsoft ã‚¿ãƒ¼ãƒŸãƒŠãƒ«ã‚µãƒ¼ãƒ“ã‚¹ï¼ˆã¾ãŸã¯ãƒªãƒ¢ãƒ¼ãƒˆãƒ‡ã‚¹ã‚¯ãƒˆãƒƒãƒ—ãƒ—ãƒãƒˆã‚³ãƒ«ï¼‰ã‚’ä½¿ã†ã¨ã€ã‚·ãƒ³ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‹ã‚‰ Windows ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚„ Windows ãƒ‡ã‚¹ã‚¯ãƒˆãƒƒãƒ—å…¨ä½“ã«ã‚¢ã‚¯ã‚»ã‚¹ã§ãã¾ã™ã€‚Microsoft ã¯ã€ã‚¿ãƒ¼ãƒŸãƒŠãƒ«ã‚µãƒ¼ãƒ“ã‚¹ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã‚µãƒ¼ãƒãƒ¼ã§æ§‹æˆã•ã‚Œã‚‹ã€ã‚¿ãƒ¼ãƒŸãƒŠãƒ«ã‚µãƒ¼ãƒ“ã‚¹ç”¨ã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ç®¡ç†ã‚·ã‚¹ãƒ†ãƒ ã‚’æä¾›ã—ã¦ã„ã¾ã™ã€‚ã“ã®ã‚µãƒ¼ãƒãƒ¼ã¯ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã‚’æä¾›ã—ï¼ˆã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚¢
mi1kman 2012/06/05
Microsoft

Symantec

è¨¼æ˜Žæ›¸

ãªã‚Šã™ã¾ã—

ãƒžãƒ«ã‚¦ã‚§ã‚¢

Flame
ãƒªãƒ³ã‚¯
Endpoint Protection - Symantec Enterprise
Flamer ã¯ã€ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã‹ã‚‰ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã¸æ‹¡æ•£ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ãŸã ã—ã€è‡ªå‹•çš„ã«ã¯æ‹¡æ•£ã›ãšã€æ”»æ’ƒè€…ã‹ã‚‰ã®æŒ‡ç¤ºã‚’å¾…ã¡ã¾ã™ã€‚æ‹¡æ•£ã®æ–¹æ³•ã¯æ¬¡ã®ã¨ãŠã‚Šã§ã™ã€‚ ãƒ‰ãƒ¡ã‚¤ãƒ³ç®¡ç†è€…ãªã©ã®èªè¨¼æƒ…å ±ã‚’å–å¾—ã—ã¦ã€ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯å…±æœ‰ã‚’ä»‹ã—ã¦æ‹¡æ•£ã™ã‚‹ ä»¥å‰ Stux net ã§ä½¿ç”¨ã•ã‚ŒãŸ Microsoft Windows Print Spooler Service Remote Code Execution Vulnerabilityï¼ˆå°åˆ·ã‚¹ãƒ—ãƒ¼ãƒ©ã«é–¢ã™ã‚‹ãƒªãƒ¢ãƒ¼ãƒˆã‚³ãƒ¼ãƒ‰å®Ÿè¡Œã®è„†å¼±æ€§ï¼‰ï¼ˆCVE-2010-2729ï¼‰ã‚’ä»‹ã—ã¦æ‹¡æ•£ã™ã‚‹ ä»¥å‰ Stux net ã§ã®ä½¿ç”¨ãŒç¢ºèªã•ã‚ŒãŸã€å°‚ç”¨ã® autorun.inf ãƒ•ã‚¡ã‚¤ãƒ«ã‚’ä½¿ç”¨ã—ã¦ã€ãƒªãƒ ãƒ¼ãƒãƒ–ãƒ«ãƒ¡ãƒ‡ã‚£ã‚¢ã‚’ä»‹ã—ã¦æ‹¡æ•£ã™ã‚‹ ä»¥å‰ Stux net ã§ä½¿ç”¨ã•ã‚ŒãŸè„†å¼±æ€§ã® Microsoft Windows Shortcut 'LNK/PIF' Files Automatic
mi1kman 2012/06/05
Symantec

ãƒžãƒ«ã‚¦ã‚§ã‚¢

Flame
ãƒªãƒ³ã‚¯
Stuxnet/Duquã«åŒ¹æ•µã™ã‚‹ã‚¹ãƒ¼ãƒ‘ãƒ¼ã‚µã‚¤ãƒãƒ¼å…µå™¨ã€ŒFlameã€ãŒè¦‹ã¤ã‹ã‚‹ã€€
mi1kman 2012/05/29
Flame

ãƒžãƒ«ã‚¦ã‚§ã‚¢
ãƒªãƒ³ã‚¯
Stuxnetç´šã®é«˜åº¦ãªãƒžãƒ«ã‚¦ã‚§ã‚¢å‡ºç¾ã€ã‚µã‚¤ãƒãƒ¼å…µå™¨ã«ä½¿ç”¨ã‹
å›½å®¶ã®æ–½è¨ã‚’æ¨™çš„ã¨ã™ã‚‹æ¥µã‚ã¦é«˜åº¦ãªãƒžãƒ«ã‚¦ã‚§ã‚¢ã€ŒFlameã€ãŒè¦‹ã¤ã‹ã£ãŸã€‚Kaspersky Labã§ã¯ã€Duquã‚„Stux netã¨åŒã˜ã€Œã‚¹ãƒ¼ãƒ‘ãƒ¼ã‚µã‚¤ãƒãƒ¼å…µå™¨ã€ã®éƒ¨é¡žã«å±žã™ã‚‹ã¨åˆ†æžã—ã¦ã„ã‚‹ã€‚ ãƒã‚·ã‚¢ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¼æ¥Kaspersky Labã¯5æœˆ28æ—¥ã€Stux netã‚„Duquã¨åŒã˜éƒ¨é¡žã«å±žã™ã‚‹æ¥µã‚ã¦é«˜åº¦ãªãƒžãƒ«ã‚¦ã‚§ã‚¢ãŒã€å›½å®¶ã®æ–½è¨ã‚’æ”»æ’ƒã™ã‚‹ãŸã‚ã®ã‚µã‚¤ãƒãƒ¼å…µå™¨ã¨ã—ã¦å‡ºå›žã£ã¦ã„ã‚‹ã®ã‚’è¦‹ã¤ã‘ãŸã¨ç™ºè¡¨ã—ãŸã€‚ã‚¤ãƒ©ãƒ³ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–æ©Ÿé–¢ã‚‚åŒæ—¥ã€ã»ã¼åŒã˜å†…å®¹ã®ç™ºè¡¨ã‚’è¡Œã£ã¦ã„ã‚‹ã€‚ ã“ã®ãƒžãƒ«ã‚¦ã‚§ã‚¢ã¯ã€ŒFlameã€ã¨å‘¼ã°ã‚Œã€å›½éš›é›»æ°—é€šä¿¡é€£åˆï¼ˆITUï¼‰ã¨KasperskyãŒåˆ¥ã®ç ´å£Šçš„ãªãƒžãƒ«ã‚¦ã‚§ã‚¢ã‚’èª¿ã¹ã¦ã„ã‚‹éŽç¨‹ã§è¦‹ã¤ã‹ã£ãŸã¨ã„ã†ã€‚ä¸»ã«ã‚µã‚¤ãƒãƒ¼ã‚¹ãƒ‘ã‚¤ã®æ©Ÿèƒ½ã‚’æŒã¡ã€ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ç”»é¢ã®ã‚¹ã‚¯ãƒªãƒ¼ãƒ³ã‚·ãƒ§ãƒƒãƒˆã€æ¨™çš„ã¨ã™ã‚‹ã‚·ã‚¹ãƒ†ãƒ ã«ã¤ã„ã¦ã®æƒ…å ±ã€ä¿å˜ã•ã‚ŒãŸãƒ•ã‚¡ã‚¤ãƒ«ã€é€£çµ¡å…ˆæƒ…å ±ã€éŸ³å£°éŒ²éŸ³è¨˜éŒ²ãªã©ã®æƒ…å ±ã‚’ç›—ã¿å‡ºã—ã¦ãƒžãƒ«ã‚¦ã‚§ã‚¢åˆ¶
mi1kman 2012/05/29
ãƒžãƒ«ã‚¦ã‚§ã‚¢

ã‚µã‚¤ãƒãƒ¼å…µå™¨

ã‚µã‚¤ãƒãƒ¼æˆ¦äº‰

Flame
ãƒªãƒ³ã‚¯
1