ã¡ãã£ã¢èšäº
è·å¡2å人ã®PWã䜿ãåãããµã€ããŒæ»æ被害ã®ç
é¢ãNECãæé
ããºãææ°ããŒã¯ 199
twitterã³ã¡ã³ã 99ä»¶äž 1ïœ99件
é ãããããã
éäžãŸã§ããèªããŸãããç§ã¯ã
ä»çµã¿ãåå§çã ãªããKerberosãããããããïŒå¯å£«éã®ProjectWebã¯åŒ·ãããã·ã¹ãã 管çè
ã®ãã¿ãŒã³ã ã£ãããšãïŒãŸããéçºã«éãç¡ããç¶ç¶å©çšã§ã¯éçšã®è²»çšãã«ã¹ãæè¡çè² åµãè¿æžäžèœã«ãªã£ãŠãã
ä»çµã¿ãåå§çã ãªããKerberosããããããã
ãç°¡åãã°ã€ã³ã«ããŠãããŠãã
çŸå Žã®å£°ã«æŒããããããªã
åæ ããã
æ浊ããã®ç確ãªãæèŠæèŠããã
çŸå Žã®å£°ã«æŒããããããªã
åæ ããã
æ浊ããã®ç確ãªãæèŠæèŠããã
ããâŠ
åœåäŒçäºã®æ浊ãã³ã¡ã³ããããŠé ããŠãããŸãïœ
æ¢èŠæãã
ã©ãããããªãããªãã ãããªã
ã©ãããããªãããªãã ãããªã
ã»ãã¥ãªãã£ãŒå°é家ã®æ浊é幞ããã¯ãICã«ãŒãèªèšŒã䜿ã£ãŠå®å
šãæ
ä¿ããŠããããã«èŠãããããèŠãç®ã ãã®ã»ãã¥ãªãã£ãŒå¯ŸçãšèšãããŠãä»æ¹ããªãããšææããã
ãã¹ã¯ãŒããšã¯ãªãã ã£ãã®ã
ãçŽ2å人ã®è·å¡ãããœã³ã³ã䜿ãããã«å²ãåœãŠããããã¹ã¯ãŒããããã¹ãŠåãã ã£ãããšãã»ã³ã¿ãŒãªã©ãžã®åæã§ããã£ãã
ãšã°ã
ãšã°ã
ããããªãããŸãã«ãåãããŠãäºäŸç ç©¶çŽ æã«ããªããªãã
倧éªã®ç
é¢ãžã®ãµã€ããŒæ»æã¯ããã¹ã¯ãŒãã®äœ¿ãåãã被害ãæ¡å€§ãããå¯èœæ§ããããšã®äºã§ãã
ããã¯èå³æ·±ãã§ããã
ð¬ããã¯NECã®ãã§ã³ããšãããæ æ
¢ã ã
ããâŠéçšã®æåã§ã¯âŠ
ãâŠICã«ãŒããããããäžã§è·å¡ããšã«ç°ãªãèªèšŒã³ãŒããå ¥åããŠãããã³ãŒããæ£ããããšã確èªãããšãèªèšŒã·ã¹ãã ã¯å šå¡ã«å ±éãããã¹ã¯ãŒããšè·å¡ããšã®IDãããœã³ã³ã«éä¿¡ããâŠã
ãâŠICã«ãŒããããããäžã§è·å¡ããšã«ç°ãªãèªèšŒã³ãŒããå ¥åããŠãããã³ãŒããæ£ããããšã確èªãããšãèªèšŒã·ã¹ãã ã¯å šå¡ã«å ±éãããã¹ã¯ãŒããšè·å¡ããšã®IDãããœã³ã³ã«éä¿¡ããâŠã
ããITãã³ããŒã ãITmedia NEWSãå
šå¡ã«ç®¡çè
æš©éããã¹ã¯ãŒãã¯å
šéšå
±éãè匱æ§ã¯æŸçœ®âŠâŠ ã©ã³ãµã æ»æåãã倧éªæ¥æ§æã» å»çã»ã³ã¿ãŒã®ããããªäœå¶
äœã®ããã®ICã«ãŒãã ãïŒ
ãICã«ãŒããããããäžã§è·å¡ããšã«ç°ãªãèªèšŒã³ãŒããå ¥åãã³ãŒããæ£ããããšã確èªãããšãèªèšŒã·ã¹ãã ã¯å šå¡ã«å ±éãããã¹ã¯ãŒããšè·å¡ããšã®IDãããœã³ã³ã«éä¿¡ã
ã¯ãïŒïŒãããNECãéçšèšèšããã£ãŠããããçµãã£ãŠããªã
ãICã«ãŒããããããäžã§è·å¡ããšã«ç°ãªãèªèšŒã³ãŒããå ¥åãã³ãŒããæ£ããããšã確èªãããšãèªèšŒã·ã¹ãã ã¯å šå¡ã«å ±éãããã¹ã¯ãŒããšè·å¡ããšã®IDãããœã³ã³ã«éä¿¡ã
ã¯ãïŒïŒãããNECãéçšèšèšããã£ãŠããããçµãã£ãŠããªã
ICã«ãŒãäœã®ããã«ããã®(ŽÏ`)ïŒ
åŸã§
åŒç€Ÿã¿ãŠããªéçšããŠããªâŠïŒ
åŒç€Ÿã¿ãŠããªéçšããŠããªâŠïŒ
瀟å
ã·ã¹ãã 觊ã£ãŠããšã瀟å
ãããã¯ãŒã¯ã¯å®å
šã ãšæ³å®ããŠã»ãã¥ãªãã£äœããŠãOKããšããŠãã·ã¹ãã ãå°å³ã«å€ãããšâŠâŠçµå±ããããã®æ
£ç¿ã«ãããããã§ãããæãããã客ãOKãšèšã£ãŠãå®å
šã«ããŠãã
æ¬æ¥ããããã¹ããšããã®ã¯ã¿ããªåãã£ãŠãŠãã誰ãå€ããããšããªããæ¥æ¬äººã ãããã
èšèšãäžé©åã ãšããŠã
ç é¢ãNECã«éè ãå± ãã
ç é¢ãNECã«éè ãå± ãã
ãªããå€ãªã·ã¹ãã ã ã
ããããã®ã£ãŠé»å蚌ææžãšãFIDOã¿ãããªã®ã䜿ãã®ã§ã¯ãšæããã©
#
ããããã®ã£ãŠé»å蚌ææžãšãFIDOã¿ãããªã®ã䜿ãã®ã§ã¯ãšæããã©
#
ãNECã¯åæã«å¯Ÿããå瀟åŽããã¹ã¯ãŒã䜿ãåãã®æé ã決ããŠããããšãèªãããå®éã®éçšã¯ã»ã³ã¿ãŒãã·ã¹ãã ã®ç®¡çãå§èšããæ¥è
ãæ
åœããNECã決ããæé ã«åºã¥ããå
±éã®ãã¹ã¯ãŒãã䜿ãããã¥ã¢ã«ãäœæããŠããã
ãé»åã«ã«ãã®ç®¡ççšIDãšãã¹ã¯ãŒãã䜿ãåããããµã€ããŒæ»æã®è¢«å®³æ¡å€§ã«ã€ãªãã£ãããšãå€æããŠãããããããŒâŠãããã§å
šåœã®é»åã«ã«ãå
±æãå§ããããããããŒã¿æµåºã»è²©å£²åŸ
ã£ããªãã ãªãâ
倧éªæ¥æ§æã» å»çã»ã³ã¿ãŒ
ãµã€ããŒæ»æåããç é¢ èª¿æ»å§ãå ±åæž å¯Ÿçã®äžåãææ
è·å¡2å人ã®PWã䜿ãåã
ãµã€ããŒè¢«å®³ã®å€§éªã®ç é¢ãè€æ°ãµãŒããŒã§å ±éãã¹ã¯ãŒã䜿çš
ãµã€ããŒæ»æåããç é¢ èª¿æ»å§ãå ±åæž å¯Ÿçã®äžåãææ
è·å¡2å人ã®PWã䜿ãåã
ãµã€ããŒè¢«å®³ã®å€§éªã®ç é¢ãè€æ°ãµãŒããŒã§å ±éãã¹ã¯ãŒã䜿çš
ããæŸããã
ææèšäºã§éäžãŸã§ããèªããªãããNECã®ã»ãã¥ãªãã£ææ³ã¯å€§äžå€«?ãšæã£ãŠããŸãã®ã ãâ¥ã
ãçŽ2å人ã®è·å¡ãããœã³ã³ã䜿ãããã«å²ãåœãŠããããã¹ã¯ãŒããããã¹ãŠåãã ã£ãããšãã»ã³ã¿ãŒãªã©ãžã®åæã§ããã£ãããâŠããã¯ã²ã©ãã
ããä»ã®ç
é¢ããã£ãŠããšããå€ããâŠ
ãããããã«ãŒãèªèšŒããŠãéä¿¡ããããã¹ã¯ãŒããå
šå¡åããšãæ£æ°ãïŒïŒ
ã¬ã¯ã ãããã£ãœãããã ããããã
ã¬ã¯ã ãããã£ãœãããã ããããã
ã·ã¹ãã ä¿å®ã§ïŒãã³ããŒãããèŠãŠããã©ãã©ã®ãã³ããŒã§ãåããã§ïŒ
ãã察å¿ããã£ãŠèšããããå šåœããæ²é³Žäžããðš
ãã察å¿ããã£ãŠèšããããå šåœããæ²é³Žäžããðš
"ã»ãã¥ãªãã£ãŒå°é家ã®æ浊é幞ããã¯ãICã«ãŒãèªèšŒã䜿ã£ãŠå®å
šãæ
ä¿ããŠããããã«èŠãããããèŠãç®ã ãã®ã»ãã¥ãªãã£ãŒå¯ŸçãšèšãããŠãä»æ¹ããªãããšææãã"
ãããâŠ
#
ããã
ããã
ïŒïŒïŒïŒïŒâŠ
NECã«ã»ãã¥ãªãã€é¢ä¿ã§ãå€ãã®ç¥ã£ãŠããæ¹ããããã§ãããããã®éšéã¯ä»åã¯é¢ä¿ããŠããªãã®ããªïŒ
ãã¶ãåãåãããšãæ¥ãŠå€§å€ã«ãªã£ãŠãããããã
ãã¶ãåãåãããšãæ¥ãŠå€§å€ã«ãªã£ãŠãããããã
ã¬ã¬ã·ãŒITæ°ã¯ã€ãããã¯ãããã«ç解ã§ããªãâŠ
ãããªç
é¢ãããã§ããããã
èªèšŒãµãŒãã§ã¢ã¯ã»ã¹ããŒã¯ã³çºè¡æã¯ID/passã¯ã¡ãããšãã§ãã¯ããŠããã©ãçºè¡ãããã¢ã¯ã»ã¹ããŒã¯ã³ã¯åºå®ã§ãWebã¢ããªãžã®ã¢ã¯ã»ã¹æã¯ã¢ã¯ã»ã¹ããŒã¯ã³åºå®å€ã ãããçŽã§çãããã£ãŠã€ã¡ãŒãžããªã
ããã¯NECã®ç
é¢é¢ä¿éšçœ²ã¯å€§å€ã ãªãŒ
æ®éã®èãã ãšäžè¬¹æ
ãããããªããã©ãææ¥ãæåœã§ãã¹ã¯ãŒãå
¥åã¯çŸå®çãããªããšæããå
šãŠiPhoneãããã®çäœèªèšŒã«ããã»ããããã #
ããã¯ãšã³ããšã®éä¿¡ã«å
±ééµã䜿ãã®ã¯APIããŒãšããšåãã§äœ¿ãããã«ãã£ãŠã¯åé¡ã®ãªãä»çµã¿ã ãšæããã©ãæŒããå Žåã«èŽåœçã ãã
ã3ã¶æã«1åãã¹ã¯ãŒãã®å€æŽã匷å¶ãããæ
å ±ã·ã¹ãã ãå»å¹Žã®4æã«å°å
¥ããããã£ãŠè¢«å®³è
ã
ã©ããŠããããïŒäžã«ã¯äžããã
䜿ãåãã©ãããâŠorz
倧éªæ¥æ§æã» å»çã»ã³ã¿ãŒïŒå€§éªåžïŒã§ãçŽ2å人ã®è·å¡ãããœã³ã³ã䜿ãããã«å²ãåœãŠããããã¹ã¯ãŒããããã¹ãŠåãã ã£ãã
倧éªæ¥æ§æã» å»çã»ã³ã¿ãŒïŒå€§éªåžïŒã§ãçŽ2å人ã®è·å¡ãããœã³ã³ã䜿ãããã«å²ãåœãŠããããã¹ã¯ãŒããããã¹ãŠåãã ã£ãã
ICã«ãŒããããããšID/PWãéãããå®è£
ã«ãªã£ãã®ã¯å»çç³»LANå
ã®æ©åšãè¶
ãã«ããã³ããã€èªèšŒé£æºæ©æ§ããªãå Žåãããã®ã§äžçªæ¥œã§ç¢ºå®ã ããããªãã§ãã©ãã«æã®ã¡ã³ãã³ã¹ããäžããããçµ±äžPWã«ããéçšã
ãªãã¡ãã£ãŠäºèŠçŽ ã¿ãã㪠-
âã»ãã¥ãªãã£ãŒå°é家ã®æ浊é幞ããã¯ãICã«ãŒãèªèšŒã䜿ã£ãŠå®å
šãæ
ä¿ããŠããããã«èŠãããããèŠãç®ã ãã®ã»ãã¥ãªãã£ãŒå¯ŸçãšèšãããŠãä»æ¹ããªãããšææãããâ
ââ~âÐ)â
ãã³ã·ã§ã³å
ã®å
±çšéšãå«ããå
šæžã®çé¢ã®éµãå
šéšåããåæžã§ææããŠããéµã®ã€ããŠããç©å
šãŠãåãéµã§éãããã¹ãŠã®éšå±ã®äœäººãå
±çšéšåãå«ããä»äººã®å®¶ã«ãå
¥ãæŸé¡ãªç¶æ
ã
ãã®ç¶æ³ã¯ãããããããšç®¡ç人ãšç®¡çäŒç€Ÿãå ±ç¯ããç¥ããªãå¯èœæ§ãéåžžã«é«ãã
ãã®ç¶æ³ã¯ãããããããšç®¡ç人ãšç®¡çäŒç€Ÿãå ±ç¯ããç¥ããªãå¯èœæ§ãéåžžã«é«ãã
ã¯ã©ãã«ãŒãã€ãã€ããããæ³åã絶ãããªãç·©ãã«ãçšãããã
#
#
ãæ°ã«ãªã話é¡ã
å»çæ¥çã¯ãããä¿å®çãªæ¥çã ãšæã£ãŠã
ã誰ããã ã管çããŠãŠãããã®äººãæ£ãããããéçšãããŠãªãã£ããæ²ããäºä»¶
ãããã
ã»ãã¥ãªãã£ãŒå°é家ã®æ浊é幞ããã¯ãICã«ãŒãèªèšŒã䜿ã£ãŠå®å šãæ ä¿ããŠããããã«èŠãããããèŠãç®ã ãã®ã»ãã¥ãªãã£ãŒå¯ŸçãšèšãããŠãä»æ¹ããªãããšææããã
ã»ãã¥ãªãã£ãŒå°é家ã®æ浊é幞ããã¯ãICã«ãŒãèªèšŒã䜿ã£ãŠå®å šãæ ä¿ããŠããããã«èŠãããããèŠãç®ã ãã®ã»ãã¥ãªãã£ãŒå¯ŸçãšèšãããŠãä»æ¹ããªãããšææããã
> ICã«ãŒããããããäžã§è·å¡ããšã«ç°ãªãèªèšŒã³ãŒããå
¥åããŠãããã³ãŒããæ£ããããšã確èªãããšãèªèšŒã·ã¹ãã ã¯å
šå¡ã«å
±éãããã¹ã¯ãŒããšè·å¡ããšã®IDãããœã³ã³ã«éä¿¡
èŠãããã ãã®ICã«ãŒãèªèšŒãããã»ã»ã»
ã©ããªã£ãŠãããNEC!
ã©ããªã£ãŠãããNEC!
ãã®æã®åºå®æåå䜿ãã®ä»ã«ãããããã ãª..ã¯ããããã©ã³ãã ãªå€ãèšå®ããŠããã°ãããã ãããã©.. :
ãã¡ã€ã³ç®¡çã§åäžãŠãŒã¶ãŒã䜿ããŸããã»ã»ã»ãŠãŒã¶ãŒåŽã®ããªã·ãŒããªããŠæ¥è
ä»»ããšãããã¿ãŒã³ãã
å
šå¡ã«å
±éãããã¹ã¯ãŒãã£ãŠïŒ
ãICã«ãŒããããããäžã§è·å¡ããšã«ç°ãªãèªèšŒã³ãŒããå ¥å/èªèšŒã·ã¹ãã ã¯å šå¡ã«å ±éãããã¹ã¯ãŒããšè·å¡ããšã®IDãããœã³ã³ã«éä¿¡ã
ãICã«ãŒããããããäžã§è·å¡ããšã«ç°ãªãèªèšŒã³ãŒããå ¥å/èªèšŒã·ã¹ãã ã¯å šå¡ã«å ±éãããã¹ã¯ãŒããšè·å¡ããšã®IDãããœã³ã³ã«éä¿¡ã
ãããããæå³ããªããªããã¹ã¯ãŒããçŸå Žã¯ã€ããããã§ããã¡ãã¡ãªNECïŒãšäžè«ãããïŒã
ãICã«ãŒãèªèšŒã䜿ã£ãŠå®å
šãæ
ä¿ããŠããããã«èŠãããããèŠãç®ã ãã®ã»ãã¥ãªãã£ãŒå¯ŸçãšèšãããŠãä»æ¹ããªãã
ãNECã¯åæã«å¯Ÿããå瀟åŽããã¹ã¯ãŒã䜿ãåãã®æé ã決ããŠããããšãèªãããã
å
šè·å¡å
±éãã¹ã¯ãŒãã«ããéçšã¯ä»ã§ããããããªäºæãããªãã"
>ICã«ãŒããããããäžã§è·å¡ããšã«ç°ãªãèªèšŒã³ãŒããå
¥å
>èªèšŒã·ã¹ãã ã¯å šå¡ã«å ±éãããã¹ã¯ãŒããšè·å¡ããšã®IDãããœã³ã³ã«éä¿¡ããé»åã«ã«ãã«æ¥ç¶
ã¬ã¯ã ããã¶ããåœSSOã âŠ
>èªèšŒã·ã¹ãã ã¯å šå¡ã«å ±éãããã¹ã¯ãŒããšè·å¡ããšã®IDãããœã³ã³ã«éä¿¡ããé»åã«ã«ãã«æ¥ç¶
ã¬ã¯ã ããã¶ããåœSSOã âŠ
ãããç¶æ°çµ±åã®è±¡åŸŽã
åºæ°ã®å¥åº·ãªããŠç¥šã«ã€ãªãããªãããããªãããã ãª
#
åºæ°ã®å¥åº·ãªããŠç¥šã«ã€ãªãããªãããããªãããã ãª
#
ãªãã©ããã©ããã©ãå»çç³»ã£ãŠã€ãããšãå€ããšæã ããã¶äžžæãã§ææ¡ããŠãäžã®äººã¯èª°ãããªãåžã¬ã¹
é§ç®ããã ã
ãå§èšæ¥è
ã®äœæ¥ã®å©äŸ¿æ§ãåªå
ããåŽé¢ããã£ããšãããã»ãã¥ãªãã£ãšã¯âŠ
ããã¯ã²ã©ã
é»åã«ã«ãã ãã§ãªããè·å¡ã«å²ãåœãŠããããã¹ã¯ãŒãããã¹ãŠåãã ã£ãã¿ããã§ããã
â ICã«ãŒãã§èªèšŒããç°ãªãèªèšŒã³ãŒããå ¥å
â¡èªèšŒåŸã"å ±éããPW è·å¡ããšã®ID" ã§æ¥ç¶
â ICã«ãŒãã§èªèšŒããç°ãªãèªèšŒã³ãŒããå ¥å
â¡èªèšŒåŸã"å ±éããPW è·å¡ããšã®ID" ã§æ¥ç¶
ããã¯ã²ã©ãâŠ
ãŸãé è€ã®ãã£ã¡ãããã©ãããããªã
èšäº:NECã¯åæã«å¯Ÿããå瀟åŽããã¹ã¯ãŒã䜿ãåãã®æé ã決ããŠããããšãèªãããå®éã®éçšã¯ã»ã³ã¿ãŒãã·ã¹ãã ã®ç®¡çãå§èšããæ¥è ãæ åœããNECã決ããæé ã«åºã¥ããå ±éã®ãã¹ã¯ãŒãã䜿ãããã¥ã¢ã«ãäœæããŠããã
èšäº:NECã¯åæã«å¯Ÿããå瀟åŽããã¹ã¯ãŒã䜿ãåãã®æé ã決ããŠããããšãèªãããå®éã®éçšã¯ã»ã³ã¿ãŒãã·ã¹ãã ã®ç®¡çãå§èšããæ¥è ãæ åœããNECã決ããæé ã«åºã¥ããå ±éã®ãã¹ã¯ãŒãã䜿ãããã¥ã¢ã«ãäœæããŠããã
ã€ãã
å人ãã¹ã¯ãŒããåæã«å€æŽãããšäžåžã«å±è²¬ãããè·å Žã®ãã¿ãŒã³ã ïŒçµç¹ã§æããªãã©ã·ãŒã®äœãåŸæ¥å¡ã«åãããïŒãIDã«ã¯èŠåæ§ãããè·å¡ã³ãŒãã䜿ã£ãŠãããããã«åããã¹ã¯ãŒãã䜿ãåãããšã§ã
ãè·å¡ã«ããœã³ã³ã®IDãšãã¹ã¯ãŒããæããŠããŸããšæŒæŽ©ãããªã¹ã¯ããã£ããããICã«ãŒãèªèšŒãä»ããŠèŠããªã圢ã«ããäžã§ãå
±éãã¹ã¯ãŒããèšå®ããŠããã
ã¢ãèªèšŒãªããããããã¹ã¯ãŒãã®æŠå¿µèªäœäžèŠã ã£ãã®ã§ã¯ïŒ
åºå ±ãèšè ã®ã©ã£ã¡ãã®ç解ãå€ãªæ°ããã
ã¢ãèªèšŒãªããããããã¹ã¯ãŒãã®æŠå¿µèªäœäžèŠã ã£ãã®ã§ã¯ïŒ
åºå ±ãèšè ã®ã©ã£ã¡ãã®ç解ãå€ãªæ°ããã
èå³æ·±ãæèª/
ã»ãã¥ãªãã£ãŒå°é家ã®æ浊é幞ããã¯ãICã«ãŒãèªèšŒã䜿ã£ãŠå®å šãæ ä¿ããŠããããã«èŠãããããèŠãç®ã ãã®ã»ãã¥ãªãã£ãŒå¯ŸçãšèšãããŠãä»æ¹ããªãããšææããã
ã»ãã¥ãªãã£ãŒå°é家ã®æ浊é幞ããã¯ãICã«ãŒãèªèšŒã䜿ã£ãŠå®å šãæ ä¿ããŠããããã«èŠãããããèŠãç®ã ãã®ã»ãã¥ãªãã£ãŒå¯ŸçãšèšãããŠãä»æ¹ããªãããšææããã
ãã¹ã¯ãŒãããããã
IDã«ã¯èŠåæ§ãããè·å¡ã³ãŒãã䜿ã£ãŠãããããã«åããã¹ã¯ãŒãã䜿ãåãããšã§ã第äžè
ã«æªçšããããªã¹ã¯ãé«ãç¶æ
ã ã£ããšãããŸãã
ç¶å ±ãåºãŠãŸããã詳现ã¯ææèšäºéšåã«ãªã£ãŠããŸããã
NECãå©ãåã«é»åã«ã«ãã®ãããã¯ãŒã¯ã«çµŠé£æ¥è
ïŒã®ãããã¯ãŒã¯ã«ã€ãªãã ããšãäžçªã®åé¡ãªãã ãã©ã被害æ¡å€§ãããããç¥ããªããã©ã
IDãšãã¹ã®ç®¡çãããçäœèªèšŒã«ããŠãªããªã©ã®ãã³ããŒã®èœã¡åºŠãªçšã¬ã¹âŒïž2å人ã®PWãã¹ãŠåã ãµã€ããŒæ»æ被害ã®ç
é¢ããªã¹ã¯é«ãç¶æ
ã«
ITã»ãã¥ãªãã£éšéæ€æ»æ¡ä»¶
ãè·å¡2å人ã®PW䜿ãåãã
ããå°ã詳ãã
è·å¡ã¢ã«ãŠã³ãã¯Active Directoryã®ç»é²ãŠãŒã¶ãŒ
å ããŠãDomain Adminsã°ã«ãŒãã«æå±ããŠãã
ã€ãŸãããã¡ã€ã³å ã§ã®ãã«ã³ã³ãããŒã«æš©éãäžããããŠãã
èšäºã§ã¯äžé£ã®çµç·¯ãšãèšå®ããNECåŽã«åæããŠããŸã
ããå°ã詳ãã
è·å¡ã¢ã«ãŠã³ãã¯Active Directoryã®ç»é²ãŠãŒã¶ãŒ
å ããŠãDomain Adminsã°ã«ãŒãã«æå±ããŠãã
ã€ãŸãããã¡ã€ã³å ã§ã®ãã«ã³ã³ãããŒã«æš©éãäžããããŠãã
èšäºã§ã¯äžé£ã®çµç·¯ãšãèšå®ããNECåŽã«åæããŠããŸã
ããœã³ã³ãå©çšããããã«å¿
èŠãªçŽ2å人ã®è·å¡ã¢ã«ãŠã³ãã® ãå
šãŠåãã ã£ããŒãŒ
æšå¹Ž10æã« ãåãã倧éªæ¥æ§æã» å»çã»ã³ã¿ãŒã§ããããªèšå®ããªãããŠããã
ãªãããã®ãããªå±ããéçšã«ãªã£ãŠããã®ãã
æšå¹Ž10æã« ãåãã倧éªæ¥æ§æã» å»çã»ã³ã¿ãŒã§ããããªèšå®ããªãããŠããã
ãªãããã®ãããªå±ããéçšã«ãªã£ãŠããã®ãã
2000人ã§ãã¹ã¯ãŒã䜿ãåããµã€ããŒæ»æã®è¢«å®³æ¡å€§ãåãã£ãŠããŠããã£ãŠããŸããã¹ã¯ãŒãã®äœ¿ãåããå人ã§ã被害ãå¢å ããŠããã®ã§æ³šæã§ãã
被害ã®çŽæ¥åå ã§ã¯ãªãããã©ãè·å¡å
šäœã«ã€ããŠéçšã®åé¡ããã£ããšããããšã§ããã
ã©ã³ãµã ãŠã§ã¢è¢«å®³ã®ç
é¢ãNECã·ã¹ãã å°å
¥ã®åæ°ãåæ§ã®ç¶æ³ãïŒIDã«ã¯èŠåæ§ãããè·å¡ã³ãŒãã䜿ã£ãŠãããããã«åããã¹ã¯ãŒãã䜿ãåãããšã§ã第äžè
ã«æªçšããããªã¹ã¯ãé«ãç¶æ
ã ã£ãã
ææ¥â
ã®ãã®ä¿¡ããããPW䜿ãåããã»ãã¥ãªãã£ã¯è¡šå±€ã ãã§ãå€éšããã¯åäžã¢ã«ãŠã³ãPWãããã
NECã¯è¡æ¿ã®ITæ§ç¯ãæ ãTopãã³ããŒã§ãããããç§ã ãååŸããªãçç±ãããã«ãã
ã®ãã®ä¿¡ããããPW䜿ãåããã»ãã¥ãªãã£ã¯è¡šå±€ã ãã§ãå€éšããã¯åäžã¢ã«ãŠã³ãPWãããã
NECã¯è¡æ¿ã®ITæ§ç¯ãæ ãTopãã³ããŒã§ãããããç§ã ãååŸããªãçç±ãããã«ãã
ãICã«ãŒãèªèšŒã䜿ã£ãŠå®å
šãæ
ä¿ããŠããããã«èŠãããããèŠãç®ã ãã®ã»ãã¥ãªãã£ãŒå¯ŸçãšèšãããŠãä»æ¹ããªãããšã»ãã¥ãªãã£å°é家ã®æ浊é幞ããã
è·å¡2å人ã®ãã¹ã¯ãŒãã䜿ãåã ãµã€ããŒæ»æ被害ã®ç
é¢ãNECãæé
è¡æ¿ãèªæ²»äœã®ITã·ã¹ãã é¢é£ã¯NECã寡å ããŠãã®ã¯
ããç¥ãããŠãããšãå»çãããã§å ¬ã«ãªã£ãããNECã«å¯ŸããçåèŠã匷ããã¶ã£ããééãã¿ã€ãã³ã°ã¯ä»ããã¡ã®å¶æ¥ããã°ãïŒ
ããç¥ãããŠãããšãå»çãããã§å ¬ã«ãªã£ãããNECã«å¯ŸããçåèŠã匷ããã¶ã£ããééãã¿ã€ãã³ã°ã¯ä»ããã¡ã®å¶æ¥ããã°ãïŒ
ããã¯å€§äººæ°ã ã£ãããããªãã ãããªãšã
ã ããå ±éãã¹ã¯ãŒããªããŠæå³ãªããããã¹ã¯ãŒã管çã人ã®æã ãšç¡çãããªãã§ãã
iOSäžæ¬åããŠäžåã®ã¢ã«ãŠã³ãã§å šéšã®ãã¹ãèªåä¿åã§ããã
ãŸãã¡ãŒã«ãšåãã«ãªãæ代ãè¯ããã
ã ããå ±éãã¹ã¯ãŒããªããŠæå³ãªããããã¹ã¯ãŒã管çã人ã®æã ãšç¡çãããªãã§ãã
iOSäžæ¬åããŠäžåã®ã¢ã«ãŠã³ãã§å šéšã®ãã¹ãèªåä¿åã§ããã
ãŸãã¡ãŒã«ãšåãã«ãªãæ代ãè¯ããã
以åã®å€åå
ã§ãæ°ããã§ãã瀟å
ã®ããã·ã¹ãã ã«ãã°ã€ã³ããããšããããèšå®ãããŠããªãã®ã«ãã¹ã¯ãŒããèãããã®ã§ç®¡çè
ã«åãåãããããã瀟å¡çªå·ãå
¥ããŠãã ããããšçããããããã°ã€ã³ããŠçã£å
ã«è¡ã£ãäºã¯ãã¹ã¯ãŒãã®å€æŽã ã£ãã
ææ¥æ°èããžã¿ã«
ææ¥æ°èããžã¿ã«
æãããéçšã ã£ãããNECã¯åæã«å¯Ÿããå瀟åŽããã¹ã¯ãŒã䜿ãåãã®æé ã決ããŠããããšãèªããã
ãããè·å¡ã¯ICã«ãŒããçšããŠèªèšŒããŠãããã©ãå
éšçã«ã¯è·å¡ã«åããã¹ã¯ãŒããèšå®ããŠãããšããæ§ç¯åŽã®èšèšãã¹ã®è©±ã ãããèšäºèŠåºãããé£æ³ãã姿ãšéåéãã
ã»ãã¥ãªãã£ãŒå°é家ã®æ浊é幞ããã¯ãICã«ãŒãèªèšŒã䜿ã£ãŠå®å
šãæ
ä¿ããŠããããã«èŠãããããèŠãç®ã ãã®ã»ãã¥ãªãã£ãŒå¯ŸçãšèšãããŠãä»æ¹ããªãããšææã
å šIDã®ãã¹ã¯ãŒããåäžåºå®å€
è² è·ãããããšå¥IDã®äœæ°ç¥šçºè¡