ã¡ãã£ã¢èšäº
ææã³ã³ãã¥ãŒã¿ãŒãŠã€ã«ã¹ãåã³ãäžæ°ã«ææççºãã¹ããŒããè
åš
ããºãææ°ããŒã¯ 162
twitterã³ã¡ã³ã 59ä»¶äž 1ïœ59件
âçã®æ
åœè
ã¯åæã«ãããããªå°ããªæœèšã«æ»æãæ¥ãã®ããšãæ£çŽæžæã£ãŠããŸãããšè©±ãããâ -
ã ã
æšå¹Ž4æã«å°ã蟌ããããã¯ãã®ã³ã³ãã¥ãŒã¿ãŒãŠã€ã«ã¹ ããå幎ã»ã©ã§æ¯ãå¹ãè¿ããŠããã
ã¡ãŒã«ã«è¡šèšç®ãœããããšã¯ã»ã«ãã®æ·»ä»ãã¡ã€ã«ããããéããšãŠã€ã«ã¹ã«ææããã
ãææççºããšãèšããç¶æ³ãèµ·ããŠãã
æšå¹Ž4æã«å°ã蟌ããããã¯ãã®ã³ã³ãã¥ãŒã¿ãŒãŠã€ã«ã¹ ããå幎ã»ã©ã§æ¯ãå¹ãè¿ããŠããã
ã¡ãŒã«ã«è¡šèšç®ãœããããšã¯ã»ã«ãã®æ·»ä»ãã¡ã€ã«ããããéããšãŠã€ã«ã¹ã«ææããã
ãææççºããšãèšããç¶æ³ãèµ·ããŠãã
ããã ã£ãã®ããïŒ
ãææãPCãŠã€ã«ã¹ã®Emotetææã®åŸãCobalt Strikeãæã¡èŸŒãŸããã±ãŒã¹ãããæ°æ¥ã確èªããŠããŸããã€ãŸã次ã«æ¥ãã®ã¯ãã©ã³ãµã ãŠã§ã¢ããã¬ãã®æšçåæ»æã§ããExcelã®æ·»ä»ãã¡ã€ã«ããšã£ãã«éããå·®åºäººã«ç¢ºèªãïŒïŒãïŒ
ææ¥æ°èããžã¿ã«ã«ãã«ãŒããã€ã³ãã®èª¿æ»çµæãæ²èŒãããŸããããšã¢ãããé¢é£ã®äžå¯©ã¡ãŒã«ã¯3/1-3ãŸã§ã§238äžä»¶ã2æ1ã«æã®207äžä»¶ãè¶
ãæ¥éã«æ¡å€§äžã§ããããŒããšãã³ãžã§ãªã¹ãå¢ç°å¹žçŸã¯ãä»ãŸã§ã¿ãããšããªããæ¬åœã«ãã°ãç¶æ³ããšå±æ©æããããã«ããŠããŸãã
emotetãšæãããã¡ãŒã«ã®éãã2æ以éãå§åçã«å¢ããŠããŸããææ°é¢æ°çãªå¢å ãç¶ç¶ããã®ããã©ããã§æ¯æ¢ãããããã®ããã
ãã®ã¿ã€ãã³ã°ã§âŠ
ã°ã°ã£ãã泚æåèµ·ã§æº¢ããŠãâŠ
âãEmotetãâ3æã«å ¥ãæ¥æ¿ã«å¢å¢ããææççºããšèšããç¶æ³â2019幎ããäžçèŠæš¡ã§åºããæšå¹Žå°ã蟌ãã«æåããã¯ãã ã£ãâæ¥æ¬ã§ã被害深å»åâ
ïŒææã³ã³ãã¥ãŒã¿ãŒãŠã€ã«ã¹åã³ äžæ°ã«ææççºãã¹ããŒããè åš
ã°ã°ã£ãã泚æåèµ·ã§æº¢ããŠãâŠ
âãEmotetãâ3æã«å ¥ãæ¥æ¿ã«å¢å¢ããææççºããšèšããç¶æ³â2019幎ããäžçèŠæš¡ã§åºããæšå¹Žå°ã蟌ãã«æåããã¯ãã ã£ãâæ¥æ¬ã§ã被害深å»åâ
ïŒææã³ã³ãã¥ãŒã¿ãŒãŠã€ã«ã¹åã³ äžæ°ã«ææççºãã¹ããŒããè åš
ããŒæ
åœããŠãçŸå Žã®é¢é£æ¥è
ã®ã©ã£ãã§ææããŠãããããæè¿æ°éæ¥ãŠãããŸããéä¿¡å
ãæããã«éšããªãã§æ·»ä»ã¯éããªããã©ãã§ãéšããããªããéããããªå
容ã§æ¥ãŠãã
ã³ãããææããã®ã¯
æ¬åœã¯å€§éªã ã£ãã®ã«
çºè¡šãåæå±±ã ã£ããã
åæå±±ã第äžå·ã«ãªã£ããã©
ãã£ã¡ã¯çŽç²ã«åæå±±ã
æ¬åœã¯å€§éªã ã£ãã®ã«
çºè¡šãåæå±±ã ã£ããã
åæå±±ã第äžå·ã«ãªã£ããã©
ãã£ã¡ã¯çŽç²ã«åæå±±ã
æ
å ±ãªãã©ã·ãŒ
>çã®æ åœè ã¯åæã«ãããããªå°ããªæœèšã«æ»æãæ¥ãã®ããšãæ£çŽæžæã£ãŠããŸãããšè©±ããã
>çã®æ åœè ã¯åæã«ãããããªå°ããªæœèšã«æ»æãæ¥ãã®ããšãæ£çŽæžæã£ãŠããŸãããšè©±ããã
ææãªã®ã§è²Œããªãã枟身ã®ãªãã ã£ã
ãã¡ã®äŒç€Ÿãä»ã¯æ¥ãã¡ãŒã«ã®2/3ãããã¯ããã ã
æ°æ¥åã«ããæ¥ãŠãããã£ãŠããã®ãã¥ãŒã¹èšäºã®ãŠã€ã«ã¹ð€
ãããŒé
·ããã¡ãŒã«ã®æ·»ä»ãã¡ã€ã«ã§ããŒã¿äº€æããæ
£ç¿ãã®ãã®ãèŸããªããšãªããšããªãããéä¿¡è
ã確èªã§ããªããã¡ã€ã«ãåããšããªãããã«ãããšãã§ãæåŸã¯ãªãã©ã·ã®åé¡ã«èœã¡ã¡ãããã ããªãã
emotetãææççºããŠãã®ã§ãåèªã®PCã®ã»ãã¥ãªãã£å¯Ÿçãã£ãããã
瀟å
ã®ç«¯æ«ãPCããæé ãšã·ã³ã¯ã©ã€ã¢ã³ãã«çœ®ãæãããã¡ãŒã«ã®éåä¿¡ãéšèª²æ¯ã®å°çšPCã«éçšãå€ããã»ã»çã®å¯Ÿçãå¿
èŠã§ããïŒ
瀟å
ã®ç«¯æ«ãPCããæé ãšã·ã³ã¯ã©ã€ã¢ã³ãã«çœ®ãæãããã¡ãŒã«ã®ããïœ
ð ð¬ ãã®éãæžãããæ·»ä»éã銬鹿ãå¢ããŠãããšãåå ããããŒæå³ã§å®éã®ãŠã€ã«ã¹ãšäžç·ãªãã ããª
ãã®ãã«ãŠã§ã¢ãã»ãã¥ãªãã£ã®è¬ç¿ã®ãã¿ã«ãªã£ãŠãâŠã
ãšã¢ãããã¯ä»¶åãªã©å·§åŠã«åœè£
ãããŠããäžèŠããŠèŠåããã€ããªããæ·»ä»ãã¡ã€ã«ãéããšãã¯ïŒïŒïŒçžæå
ã®ã¢ãã¬ã¹ãããã¿ãïŒïŒïŒæé¢ãäžèªç¶ã§ã¯ãªããïŒã確èªããŠããïœ
âŒãã«ãŒããã€ã³ã瀟ã®äžå¯©ã¡ãŒã«æ€ç¥æ°
ã»3æã¯1ïœ3æ¥ã§çŽ238äžä»¶è¶ ã
(2æã®1ã«æã«æ€ç¥ããã®ã¯çŽ207äžä»¶)
ææãŠã€ã«ã¹ãEmotetïŒãšã¢ãããïŒã倧æµè¡ããŠãŸããâŠãð€
ã»3æã¯1ïœ3æ¥ã§çŽ238äžä»¶è¶ ã
(2æã®1ã«æã«æ€ç¥ããã®ã¯çŽ207äžä»¶)
ææãŠã€ã«ã¹ãEmotetïŒãšã¢ãããïŒã倧æµè¡ããŠãŸããâŠãð€
â3æã¯1ïœ3æ¥ã§çŽ238äžä»¶ãæ°ãã2æã®1ã«æã«æ€ç¥ããçŽ207äžä»¶ããã§ã«è¶
ããŠãããå瀟(ç±³ãã«ãŒããã€ã³ã瀟)ã¯å
šäžçã§ãããšãããã4åã®1ã«çžåœããã¡ãŒã«ããã§ãã¯ããŠããâ
Emotetãããžã§æææ¡å€§ããŠããããæ°ãã€ããŠäžããããå®æã«æ·»ä»ãã¡ã€ã«ãURLãéããªãããšã
2022. 3. 5
ãEmotetïŒãšã¢ãããïŒãã«ãã被害ãåºãã£ãŠããŸããçŸç¶ã®ãªããŒãã§ãã
èšäºã®æåŸã®ã³ã¡ã³ããâŠç¬ïŒ
æ·»ä»ãã¡ã€ã«ã¯çµ¶å¯Ÿã«éããªãã
æ·»ä»ãã¡ã€ã«ã¯åé€ã
ååãå®ããªããããææããã
æ·»ä»ãã¡ã€ã«ã¯åé€ã
ååãå®ããªããããææããã
ââåšå®
ã¯ãŒã¯ãçãããŠãââ
2014幎ã®ã³ã³ãã¥ãŒã¿ãŒãŠã€ã«ã¹ãåã³äžæ°ã«ææççºã¹ããŒããè åš
ãšãããã¡ãŒã«ãã¡ã€ã«ã¯éãåã«ã©ãããïŒ
ããŠã€ã«ã¹ãã§ãã¯ãã ãã
åšå® ã¯ãŒã¯ã¯ããã ãã¯ç¢ºå®ã«å³å®
2014幎ã®ã³ã³ãã¥ãŒã¿ãŒãŠã€ã«ã¹ãåã³äžæ°ã«ææççºã¹ããŒããè åš
ãšãããã¡ãŒã«ãã¡ã€ã«ã¯éãåã«ã©ãããïŒ
ããŠã€ã«ã¹ãã§ãã¯ãã ãã
åšå® ã¯ãŒã¯ã¯ããã ãã¯ç¢ºå®ã«å³å®
Emotetæ¬åœã«æµééãæ¿å¢ããŠãã¿ããã ãããããªããã«ä¿ºã¯åŒã£ããããããšäŸ®ã£ãŠã人ã»ã©ãã£ããéããŠãã¯ãæå¹ããã¡ããã®ããªã
æ匷ãŠã€ã«ã¹ãšèšããã ã®ææãæ¥å¢ããŠããŸãã
äžå¯©ã¡ãŒã«ã®ç¹åŸŽã¯â
ã»ããã¡ãããåç §ãã ããããã確èªããé¡ãããŸãããšãã£ãçãäžæããã
ã»çºä¿¡å ãæ¬æ¥ã®çµç¹ã®ã¢ãã¬ã¹ãšç°ãªã
äžå¯©ã¡ãŒã«ã®ç¹åŸŽã¯â
ã»ããã¡ãããåç §ãã ããããã確èªããé¡ãããŸãããšãã£ãçãäžæããã
ã»çºä¿¡å ãæ¬æ¥ã®çµç¹ã®ã¢ãã¬ã¹ãšç°ãªã
ãŠã¶ã¯ã€åäºåºå ±éšããæ¥ããªãããŸãã¡ãŒã«ã£ãŠããã®ãŠã£ã«ã¹ã«ãŠã¶ã¯ã€ã®ãµãŒããŒãææããã®ã§ã¯ïŒð€èª¿ã¹ããç§ãäœå¹Žãåã«ãŠã¶ã¯ã€ãšã¡ãŒã«ã®ããåãããŠãã
âã©ã€ãªã³ãçŽäŒåœå±æžåºãæ¥æ¬å»åž«äŒãåæµ·éæ°è瀟âŠâŠãææ¥æ°èã確èªããã ãã§ã2æ以éã«120ãè¶
ããçµç¹ãææ被害ã泚æã®åŒã³ãããå
¬è¡šããâ
ç¥ããªãã¡ãŒã«ã«æ·»ä»ããããã¡ã€ã«ã¯éãã¬æ§ã«ãçšå¿ïŒ
å®éã«ãã£ã«ã¿ãŒéã£ãŠäœéãåä¿¡ããããã°ãããã/éä¿¡è
ã®ååã®éšãæ¹ãå§çž®ãã¡ã€ã«ã®è§£åãã¹ã¯ãŒãã®æ¬ç©ã£ãœããã¡ãŒã«æ¬æã®æ¥æ¬èªã®èªç¶ããã©ããããªãæŽç·ŽãããŠããæäœéExcelãšWordã®ãã¯ããç¡å¹ã«
ã³ã³ãã¥ãŒã¿ãŠã€ã«ã¹ããšã¢ãããããåã³æææ¡å€§ããŠãããã§ããã¡ãã£ãšåããèŠæãããŠãããã©ã
人äœãžã®ã³ãããŠã€ã«ã¹ã ãã§ãã€ããã®ã«ããã®ããâŠ
人äœãžã®ã³ãããŠã€ã«ã¹ã ãã§ãã€ããã®ã«ããã®ããâŠ
EmotetïŒãšã¢ãããïŒã«ã ããã¯
éä¿¡å ã®ã¢ãã¬ã¹ã«æ³šæ
äžå¯©ãªã¡ãŒã«ã®æ·»ä»ãã¡ã€ã«ã¯éããªã
è¿ä¿¡åãšã¯ã»ã«ïŒãã¹ã¯ãŒãä»zipãã¡ã€ã«
éä¿¡å ã®ã¢ãã¬ã¹ã«æ³šæ
äžå¯©ãªã¡ãŒã«ã®æ·»ä»ãã¡ã€ã«ã¯éããªã
è¿ä¿¡åãšã¯ã»ã«ïŒãã¹ã¯ãŒãä»zipãã¡ã€ã«
ææãŠã€ã«ã¹ïŒãšã¢ãããïŒåŸ©æŽ»ïŒã ããã§ãããããããïŒéãæãç¥ãåãã§ãã£ãŠãïŒèªåããªã¯ãšã¹ããããã¡ã€ã«ä»¥å€ã¯ãéããªãã§é»è©±ã§éãæã«èããŠã¿ãããã
ããŒãæšæ¥ããçªç¶Emotetãæ¥ããªããšã¯æã£ããã
#
#
ãã®ãŠã€ã«ã¹æ¬åœã«åä»
å·®åºäººåãååŒå è¡šèšã件åãå æ¥ã®è³æã«ã€ããŠ
æ¬æã
ããäžè©±ã«ãªã£ãŠãããŸããå æ¥è¡ããæã¡åããè³æãéä»ããŸãã
æ·»ä»ãã¡ã€ã«ãyyyymmdd zipã¿ãããªãã䜿ããã奎
ãã®ããã§ä»äºããã¡ãå¿ãããªã£ã
å·®åºäººåãååŒå è¡šèšã件åãå æ¥ã®è³æã«ã€ããŠ
æ¬æã
ããäžè©±ã«ãªã£ãŠãããŸããå æ¥è¡ããæã¡åããè³æãéä»ããŸãã
æ·»ä»ãã¡ã€ã«ãyyyymmdd zipã¿ãããªãã䜿ããã奎
ãã®ããã§ä»äºããã¡ãå¿ãããªã£ã
èšè
ã¯æ¥æ¬ã®çåºã®ã¡ãŒã«ã¢ãã¬ã¹ãDMARCã«å¯Ÿå¿ããŠããã調ã¹ãâŠ
NISCã¯å°å ¥ããŠããªãã£ã
å§çž®ãã¡ã€ã«ä»ã®Re.ã¡ãŒã«ãç¥äººããå±ãã ãã¹ã¯ãŒãä»ã§
éä¿¡ã¢ãã¬ã¹ãããããã®ã§è§£å寞åçžæã«ç¢ºèªããå ãã
æ®éã®æ·»ä»ãã¡ã€ã«ã ãšåçŽã«æäœãããããããªã
NISCã¯å°å ¥ããŠããªãã£ã
å§çž®ãã¡ã€ã«ä»ã®Re.ã¡ãŒã«ãç¥äººããå±ãã ãã¹ã¯ãŒãä»ã§
éä¿¡ã¢ãã¬ã¹ãããããã®ã§è§£å寞åçžæã«ç¢ºèªããå ãã
æ®éã®æ·»ä»ãã¡ã€ã«ã ãšåçŽã«æäœãããããããªã
å€ãå
ã«ãååŒå
ããã®æ³šæåèµ·é£çµ¡ãšãŠã€ã«ã¹ã¡ãŒã«ãè€æ°æ¥ãŠããŸãã
èªåçåé€ãšç€Ÿå¡ãçºä¿¡è ã®ã¢ãã¬ã¹èŠãŠåé€ããŠãçŸç¶ã被害ã¯èµ·ããŠãªãã§ãã
èªãåã«ãçºä¿¡è ã®ã¢ãã¬ã¹ç¢ºèªãéèŠã§ãã
èªåçåé€ãšç€Ÿå¡ãçºä¿¡è ã®ã¢ãã¬ã¹èŠãŠåé€ããŠãçŸç¶ã被害ã¯èµ·ããŠãªãã§ãã
èªãåã«ãçºä¿¡è ã®ã¢ãã¬ã¹ç¢ºèªãéèŠã§ãã
ã©ã€ãªã³ãçŽäŒåœå±æžåºãæ¥æ¬å»åž«äŒãåæµ·éæ°è瀟çææ¥æ°èã確èªããã ãã§ã2æ以éã«120ãè¶
ããçµç¹ãEmotetææ被害ã泚æã®åŒã³ãããå
¬è¡šãã²ãšãã³ææãããšã顧客ã®ã¡ãŒã«ã¢ãã¬ã¹ã«åããŠå€§éã®ãŠã€ã«ã¹å
¥ãã¡ãŒã«ãã°ããŸããããéãå
ããåãåããã殺å°ã
ãæ¬åœã«ãã°ãç¶æ³ã§ãã
ææãããšã顧客ã¢ãã¬ã¹ã«åã倧éã®ãŠã€ã«ã¹å ¥ãã¡ãŒã«ãã°ããŸãããšã¢ããããã被害ã¯æ¥æ¬ã§ãã
ä»æããŠããã®ã¯ããã·ã¢ãªã©ã®ãµã€ããŒç¯çœªéå£ãšããã®ãé説ã§ãã
ææãããšã顧客ã¢ãã¬ã¹ã«åã倧éã®ãŠã€ã«ã¹å ¥ãã¡ãŒã«ãã°ããŸãããšã¢ããããã被害ã¯æ¥æ¬ã§ãã
ä»æããŠããã®ã¯ããã·ã¢ãªã©ã®ãµã€ããŒç¯çœªéå£ãšããã®ãé説ã§ãã
ç¥ãåãã®ééäŒç€ŸããããããïŒEmotet
ç¬ã£ãŠãã¯ãããªããããªããå
é£ãµã€ããŒã»ãã¥ãªãã£ã»ã³ã¿ãŒïŒNISCïŒã¯å°å
¥ããŠããªãã£ãã
EmotetïŒãšã¢ãããïŒããã€ãå
æ¥å°åå®ã«ãæè¿ã¯ãç¡æ²æ±°ã®ã¡ãŒã«ãŒç³»ã¡ãŒã«ã¢ãã¬ã¹ããå±ããããã®æ¹ãèžã¿å°ã«ãããããããæ°ãä»ããªããš(^^ã â
ææã³ã³ãã¥ãŒã¿ãŒãŠã€ã«ã¹ãšãåŒã°ããããšã¢ããããã®ææãåºãã£ãŠããŸãã
ã©ã€ãªã³ãçŽäŒåœå±æžåºãæ¥æ¬å»åž«äŒãåæµ·éæ°è瀟âŠåæå±±çã®ç§èå±±ããŒã«ã被害ã«ã
ã¡ãŒã«ã¢ãã¬ã¹ã¯éãã®ã«ã眲åã§å®åšã®çµç¹ã人ç©ãåä¹ãããšããåä»ã§ãã
äžéšåæããŸããã
ã©ã€ãªã³ãçŽäŒåœå±æžåºãæ¥æ¬å»åž«äŒãåæµ·éæ°è瀟âŠåæå±±çã®ç§èå±±ããŒã«ã被害ã«ã
ã¡ãŒã«ã¢ãã¬ã¹ã¯éãã®ã«ã眲åã§å®åšã®çµç¹ã人ç©ãåä¹ãããšããåä»ã§ãã
äžéšåæããŸããã
泚æâŒïžâ #
ããšã¯ã»ã«ã®æ·»ä»ãã¡ã€ã«ããããéããšãŠã€ã«ã¹ã«ææããããšãããã¡ãŒã«ãã¢ãã¬ã¹ãªã©ãå人æ
å ±ãçã¿åãä»æããæœãããŠããã
ããžã¿ã«åºã®å人æ å ±ãå®å šã§ãªã
ææ¥æ°èããžã¿ã«
ããžã¿ã«åºã®å人æ å ±ãå®å šã§ãªã
ææ¥æ°èããžã¿ã«
ãããå
é£ãµã€ããŒã»ãã¥ãªãã£ã»ã³ã¿ãŒïŒNISCïŒããã
ãšã¯ã»ã«ã®æ·»ä»ã«ã泚æãGoogleã¹ãã¬ããã·ãŒãã䜿ãããã«ãããããããããã
ã¡ãŒã«ã®ä»¶åã¯ãRe:å±å
ã»å±å€ããŒã«ã«ã€ããŠããªã©ãè¿ä¿¡ã®åœ¢
ããæããŠãããã§æ·»ä»éããæšãŠããã§ãä»äºãšãããŠãŠé£ç¶åŠçããŠããšéãã¡ãã£ãããããšãèããã
EmotetïŒãšã¢ãããïŒ
ãææãŠã€ã«ã¹ã ã®æ€ç¥æ°ã®ã°ã©ãã3æã¯æåã®3æ¥éã ãã§2æã®1ã«æåãè¶
ããããã§ãã
ã顧客ããã®ç¬¬äžå£°ã¯ããã°ããã©ãããããããããããªããã§ãããšæ¥æ¬ãã«ãŒããã€ã³ãã®å¢ç°å¹žçŸãããé è€éŸä¹ç·šéå§å¡ãšè€ééæèšè
ãã£ããã¯æ¶æ»
ãããšã¿ãããŠããã³ã³ãã¥ãŒã¿ãŒãŠã€ã«ã¹ã埩掻ããåœå
ã§çåšããµãã£ãŠããŸãã
ææåã匷ãããææããšãããããã
ææåã匷ãããææããšãããããã
確ãã«å€ãããããïŒãã³ãããã¯ã«ãªããããèšèïŒãã·ã¢æ
å¢ãšã®çµã³ã€ãã®ç€ºåããããïŒããã¯èšãéããªãããªïŒ
èšäºãå
šéšã¯èªããªãã®ã ãã©ã
泚æããŠãããªããšã
泚æããŠãããªããšã