ã11æäžæ¬ãããšã¿èªåè»ã®éèåäŒç€Ÿãããšã¿ãã¡ã€ãã³ã·ã£ã«ãµãŒãã¹ããã©ã³ãµã ãŠã§ã¢ã°ã«ãŒããMedusaãã®æ»æãåãã欧å·ãšã¢ããªã«ã®äžéšã·ã¹ãã ã«äžæ£ã¢ã¯ã»ã¹ãæ€åºããããšå ±ãããããæ¥æ¬ã®äŒæ¥ãç é¢ãªã©ãã©ã³ãµã ãŠã§ã¢ã®æšçã«ãªãã±ãŒã¹ã¯å¢å ããŠãããããã«ããŠè¢«å®³ãåé¿ããã®ãã¯å€§ããªèª²é¡ã«ãªã£ãŠãããã©ã³ãµã ãŠã§ã¢ã®æ»æãåãããšã©ããªè¢«å®³ãããã®ããæå¹ãªå¯Ÿçã¯ããã®ããå°é家ã«èŠè§£ãèŽããã
ãããšã¿ãã¡ã€ãã³ã·ã£ã«ãµãŒãã¹ã¯2000幎ã«ããšã¿èªåè»ã®åäŒç€ŸãšããŠèšç«ããã40以äžã®åœãšå°åã§ããšã¿è²©å£²åºåãã®éèãµãŒãã¹ãå±éããŠããåœéçäŒæ¥ãæµ·å€ã®ã»ãã¥ãªãã£ç³»ãµã€ããBleeping Computerãã«ãããšãç±³åœæé11æ16æ¥ã«ã©ã³ãµã ãŠã§ã¢ã°ã«ãŒããMedusaããããŒã¯ãŠã§ãäžã§å ¬éããŠãããµã€ããŒæ»æã®è¢«å®³è ãªã¹ãã«ããšã¿ãã¡ã€ãã³ã·ã£ã«ãµãŒãã¹ãè¿œå ããã被害ãåããŠããå¯èœæ§ãé«ãããšãå€æãããMedusaã¯ãå瀟ããçãã ããŒã¿ã人質ã«800äžãã«(çŽ11.7åå)ã®èº«ä»£éãèŠæ±ããŠããã
ãã©ã³ãµã ãŠã§ã¢ã¯ã身代éèŠæ±åãŠã€ã«ã¹ããšãåŒã°ãããµã€ããŒæ»æã«ãã£ãŠããŒã¿ãçã¿åºããããæå·åããŠäœ¿ããªãããããããã®åŸ©æ§ã«èº«ä»£éãèŠæ±ããã被害ã¯äžççã«æ¡å€§ããŠãããæ¥æ¬ã§ã2022幎2æã«ããšã¿èªåè»ã®ååŒå ã¡ãŒã«ãŒãã©ã³ãµã ãŠã§ã¢æ»æãåããããšã¿ã¯è¢«å®³ç¯å²ç¹å®ã®ããã«ãµãŒããåæ¢ãããªã©ãã圱é¿ã§åœå ã®å šå·¥å Žã®çšŒåã1æ¥åæ¢ãããå幎10æã«ã©ã³ãµã ãŠã§ã¢ã§æ»æããã倧éªæ¥æ§æã»ç·åå»çã»ã³ã¿ãŒã§ã¯ãæ°èŠå€æ¥åãå ¥ããžã®åœ±é¿ãçŽ2ã«æç¶ãããèŠå¯åºã®çºè¡šã«ãããšã2022幎äžã«å ±åã®ãã£ãã©ã³ãµã ãŠã§ã¢ã«ãã被害件æ°ã¯230件ã§ãå幎æ¯57.5ïŒ ãšæ¥å¢åŸåã«ãããšããã
ãããšã¿ãã¡ã€ãã³ã·ã£ã«ãµãŒãã¹ã¯ä»åã®è¢«å®³ã«ã€ããŠã欧å·ã»ã¢ããªã«ã®æ ç¹ã§å€éšããã®äžæ£ã¢ã¯ã»ã¹ãæ€ç¥ãããšèªããäžã§ãããµã€ããŒæ»æãããŒã¿ãçãŸããããå«ããŠèª¿æ»äžããšãããå®éã«è¢«å®³ãåãããã©ãããå瀟ã«åæãããšãããæ åœè ã¯ãããããåæã¯åãä»ããŠããªãããšã®åçã ã£ããããããMedusaã¯ããŒã¿ãçãã 蚌æ ãšããŠãããŒã¯ãŠã§ãäžã§å瀟ã®è²¡åæžé¡ãå¥çŽæžããŠãŒã¶ãŒIDãšãã¹ã¯ãŒãã身å蚌ææžã®ã¹ãã£ã³ç»åãªã©ã®ãµã³ãã«ãå ¬éããŠããã
ã©ã³ãµã ãŠã§ã¢ãšã¯
ãããããã©ã³ãµã ãŠã§ã¢ãšã¯ã©ã®ãããªãã®ãªã®ããITãžã£ãŒããªã¹ãã®æ¬ç°é äžã¯ãã®ããã«è§£èª¬ããã
ãã©ã³ãµã ãŠã§ã¢ã¯PCãµãŒããNASïŒãããã¯ãŒã¯ã«æ¥ç¶ããã¿ã€ãã®ããŒããã£ã¹ã¯ïŒãä¹ã£åããäžžããšãã®äžã®ããŒã¿ãæå·åãããã«ãŠã§ã¢ïŒæªæãããœãããŠã§ã¢ïŒãåãããã®ã§ããééãšåŒãæãã«åŸ©å·ããéµãæž¡ãããããã©ã«ãã®äžã«ç¯è¡å£°æãééæ¹æ³ãæžãããããã¹ããã¡ã€ã«ã眮ãããŠããããšãã»ãšãã©ãéé¡ã¯æ°åäžåçšåºŠã§ããããšãå€ããæ¯æã£ãŠããŸãäŒæ¥ãå€ãã§ããããäŒæ¥ãå ¬å ±æ©é¢ã ãã§ãªããç°¡åã«äœ¿ããNASã®æ®åã«ãããå人ã§ãææè ã絶ããŸãããããŒã¿ãã¡ã€ã«ã®çé£ã¯ãããã®ã©ã³ãµã ãŠã§ã¢ãšã¯ç°ãªããŸãããç§å¿ãã¹ãããŒã¿ãå ¬éããããšè ããŠããå Žåãã©ã³ãµã ãŠã§ã¢ãšããè¡šçŸã䜿ãããå ŽåããããŸããïŒæ¬ç°æ°ïŒ
ãããšã¿ãã¡ã€ãã³ã·ã£ã«ãµãŒãã¹ã¯å®éã«è¢«å®³ãåããå¯èœæ§ãé«ãã®ã ãããããã被害ãåããã®ãªããã©ã®ãããªåœ±é¿ãå±æ§ãããã®ãã
ãããŒã¯ãŠã§ãäžã§å ¬éãããŠãããµã³ãã«ããŒã¿ãçãŸãããã®ã§ããå¯èœæ§ãé«ããšããšã¿ãã¡ã€ãã³ã·ã£ã«ãµãŒãã¹èªèº«èªããŠããŸãããããã®ç¢ºçã¯é«ãã§ããããäŒæ¥åŽãèŠæ±ã«å¿ããªãå Žåãã©ã³ãµã ãŠã§ã¢ã°ã«ãŒãã¯éåžžã®ããã空éã§å°åºãã«ããŒã¿ãæŒæŽ©ããããªã©ããŠãè ããç¶ããå¯èœæ§ããããŸããå®éã«å人ããŒã¿ãå¥ã®ç¯çœªã«å©çšãããšè¶³ãã€ãå¯èœæ§ãé«ããããçŽã¡ã«äœããã®å±éºã¯ãªããããããŸãããããããçãã ããŒã¿ãä»ã®ç¯çœªçµç¹ãªã©ã«å£²ãæž¡ãå¯èœæ§ãèããããŸããïŒåïŒ
ããŸãã«ããããé©çšãããªã©ã¢ããããŒããéèŠ
ãã©ã³ãµã ãŠã§ã¢å¯Ÿçã¯äŒæ¥ã«ãšã£ãŠå€§ããªèª²é¡ãšãªãããæå¹ãªå¯Ÿçã¯ããã®ã ãããã
ãä»åã®è¢«å®³ã¯Citrix GatewayïŒãªã¢ãŒãã¢ã¯ã»ã¹ç³»ã®ãµãŒãã¹ïŒã®ãµãŒãã®ã»ãã¥ãªãã£ããŒã«ãæªçšãããã®ã§ããããã®è匱æ§ã¯1幎以äžåã«çºèŠãããŠããŸãããæ¢ç¥ã®è匱æ§ã¯ããããããŸãªãèªåçã«ã¹ãã£ã³ããããšã§çºèŠã§ããããšãå€ããã¿ãŒã²ããã«ãããããªãã§ã¯ãªããæ¢ç¥ã®è匱æ§ãžã®å¯Ÿçãæ ã£ãŠãããµãŒããNASãçã£ãŠããã ãã®ããšãå€ãããã¡ãããåæé®®ãæ»æãããšãåããã2014幎ã®ãœããŒã»ãã¯ãã£ãŒãºãšã³ã¿ãã€ã³ã¡ã³ãïŒSPEïŒãžã®å€§èŠæš¡ãµã€ããŒæ»æãªã©ãç¹å®ã®äŒæ¥ãçãå ŽåããããŸããSPEã®äŸã§ã¯å šã·ã¹ãã ãããŠã³ããæ ç»äœåã®æ©å¯æ å ±ã財åæžé¡ã俳åªã®ãã©ã€ããŒãæ å ±ãªã©ãæµåºããŠå€§éšãã«ãªããŸããããã®æãçºèŠããããªãæéãçµéããŠããå€ãã»ãã¥ãªãã£ããŒã«ã䜿ãããŸããã
ã察çã¯å°å³ã«æããã§ãããããã»ãã¥ãªãã£æ å ±ã«ã¢ã³ããã匵ããããŸãã«ããããé©çšãããªã©ã¢ããããŒãããŠããããšãèå¿ã§ããéµãéããé åã«åé¡ããªããã確èªããç°¡åã«äŸµå ¥ãããªãããã«ããããšãæãéèŠã§ãããããæ ããªããã°ãç¯çœªçµç¹ã¯ä»ã«ãã£ãšäŸµå ¥ãããããµãŒãã«çããå€ããã§ããããããŒã¿ãæå·åããŠäœ¿ããªãããæå£ã«ã€ããŠããããã¯ã¢ãããããŸãã«åã£ãŠããã°ææªã®äºæ ã¯é²ããŸãããµã ãããã®ããŒã¿éçšãæ£ããè¡ãããŠããã°ãå®å šã«ããŒã¿ã倱ããããšãã£ããªã¹ã¯ã¯é¿ããããšãã§ããŸããïŒåïŒ
ïŒæïŒäœè€å銬ãååïŒæ¬ç°é äžïŒITãžã£ãŒããªã¹ãïŒ