æŠèŠ
ãã£ãã·ã³ã°ãšã¯ãä¿¡é Œã«å€ããååšã§ããããšãè£ ãã被害è ãéšããŠæ©å¯æ å ±ãçã¿åºãæªè³ªãªæå£ã§ãã
äžå¯©ãªURLãå人æ å ±æåºãæ¥ããäŸé Œãªã©ã¯ãå žåçãªãã£ãã·ã³ã°æå£ã§ããåžžã«èŠæãæ ããªãã§ãã ããã
ãã®èšäºã§ã¯äžè¬çãªã¡ãŒã«è©æ¬ºããå·§åŠãªã¹ãã¢ïŒæšçåïŒãã£ãã·ã³ã°ãŸã§ãããŸããŸãªãã£ãã·ã³ã°æå£ãã玹ä»ããŸãããããåèã«ããµã€ããŒã»ãã¥ãªãã£ã®é²åŸ¡ã匷åããŠãã ããã
ã¯ããã«
ãã£ãã·ã³ã°ãšã¯ãä¿¡é Œã«å€ããååšã§ããããšãè£ ãã被害è ãéšããŠæ©å¯æ å ±ãçã¿åºãæªè³ªãªæå£ã§ãããã®èšäºã§ã¯ããã£ãã·ã³ã°ãšã¯äœãããã®ä»çµã¿ããããŠãã®çš®ã®è©æ¬ºãé¿ããæ¹æ³ã«çŠç¹ãåœãŠãŠè§£èª¬ããŸãã
ãã£ãã·ã³ã°ã®ä»çµã¿
ãã£ãã·ã³ã°ã¯äž»ã«ã被害è ãéšããŠæ©å¯æ å ±ãçã¿åºããœãŒã·ã£ã«ãšã³ãžãã¢ãªã³ã°ãçšããŠè¡ãããŸããæ»æè ã¯ãïŒãœãŒã·ã£ã«ã¡ãã£ã¢ãªã©ã®ïŒå ¬çãªæ å ±æºããå人æ å ±ãåéããäžèŠæ¬ç©ã®ããã«èŠããã¡ãŒã«ãäœæããŸãã被害è ã«ã¯ã身è¿ãªé£çµ¡å ãä¿¡é Œã§ããçµç¹ããã®ã¡ãŒã«ãè£ ã£ãæªæã®ããã¡ãŒã«ãéãããŠããŸãã
æªæã®ãããªã³ã¯ãæ·»ä»ãã¡ã€ã«ãã¡ãŒã«ã§éãã®ãæãäžè¬çãªãã£ãã·ã³ã°ã®åœ¢æ ã§ãããããããªã³ã¯ãã¯ãªãã¯ãããšããŠãŒã¶ãŒã®ç«¯æ«ã«ãã«ãŠã§ã¢ãã€ã³ã¹ããŒã«ãããããå人æ å ±ãéèæ å ±ãçã¿åºãåœãµã€ãã«èªå°ããããããŸãã
æç« ãçšæãªãã£ãã·ã³ã°ã¡ãŒã«ã¯ç°¡åã«æªããã«æ°ä»ãããã®ã®ããµã€ããŒç¯çœªè ã¯ãã£ããããããAIé³å£°ãžã§ãã¬ãŒã¿ãŒãªã©ã®é«åºŠãªããŒã«ãå©çšããåœè£ å 容ã®ä¿¡ææ§ãé«ããŠããŸãããã®ãããæ¬ç©ã§ãããè©æ¬ºã§ããããèŠåããã®ã¯å°é£ã«ãªã£ãŠããŠããŸãã
ãã£ãã·ã³ã°è©æ¬ºã®å€å¥
ãã£ãã·ã³ã°ã¡ãŒã«ã®å€å¥ã¯é£ãããªãããã泚æãã¹ãããã€ãã®å åããããŸãã
äžè¬çãªå å
ã¡ãã»ãŒãžã«äžå¯©ãªURLãå«ãŸããŠããå Žåãå ¬éãããŠããã¡ãŒã«ã¢ãã¬ã¹ã䜿çšãããŠããå Žåãææãç·æ¥æ§ãç œãå Žåãå人æ å ±ãèŠæ±ããå Žåãã¹ãã«ãã¹ãææ³ãã¹ãããå Žåã«ã¯æ³šæãå¿ èŠã§ããã»ãšãã©ã®ãªã³ã¯ã¯ãå®éã«ã¯ãªãã¯ããªããŠããªã³ã¯äžã«ããŠã¹ã®ã«ãŒãœã«ãåãããã°URLã確èªã§ããŸãã
ããžã¿ã«æ±ºæžè©æ¬º
PayPalãVenmoãWiseãªã©ã®èåãªãªã³ã©ã€ã³æ±ºæžãµãŒãã¹ãžã®ãªãããŸããå€ãèŠãããŠããŸãããŠãŒã¶ãŒã«è©æ¬ºã¡ãŒã«ãéä¿¡ããããã°ã€ã³æ å ±ã®ç¢ºèªãæ¥ãããŠããŸããååã«èŠæããäžå¯©ãªè¡åã«ééããå Žåã¯é¢ä¿æ©é¢ã«å ±åããŠãã ããã
éèæ©é¢ãè£ ããã£ãã·ã³ã°æ»æ
éè¡ãéèæ©é¢ã«ãªãããŸããã»ãã¥ãªãã£ã䟵害ããããšããŠå人æ å ±ãåŒãåºãããšãããã®ã§ããããããæå£ãšããŠã¯ãæ°å ¥ç€Ÿå¡ãçã£ãééè©æ¬ºãæ¯ã蟌ãè©æ¬ºãããããè©æ¬ºã¡ãŒã«ãèŠãããŸãããŸããç·æ¥ã®ã»ãã¥ãªãã£ã¢ããããŒããè¡ããšè¬³ãå ŽåããããŸãã
æ¥åãè£ ããã£ãã·ã³ã°è©æ¬º
çµå¶å¹¹éšãCEOãCFOãè£ ããéè¡ééãèåœã®è³Œå ¥ãæ¯æããããŒãœãã©ã€ãºãããè©æ¬ºã§ããAIé³å£°ãžã§ãã¬ãŒã¿ãŒãçšãé»è©±ã«ãããã£ãã·ã³ã°ãèŠãããŠããŸãã
ãã£ãã·ã³ã°æ»æãé²ãæ¹æ³
ãããããã£ãã·ã³ã°æ»æãé²ãã«ã¯ãè€æ°ã®ã»ãã¥ãªãã£å¯Ÿçã®å®æœãéèŠã«ãªããŸãããŸãããªã³ã¯ãçŽæ¥ã¯ãªãã¯ããããšã¯é¿ããããã«ããŠãã ããããã®ä»£ããã«ãäŒæ¥ã®å ¬åŒãŠã§ããµã€ãããã£ã³ãã«ã«ã¢ã¯ã»ã¹ããåãåã£ãæ å ±ãæ£åœãªãã®ãã©ããã確èªããŠãã ããããŠã€ã«ã¹å¯Ÿçãœããããã¡ã€ã¢ãŠã©ãŒã«ãã¹ãã ãã£ã«ã¿ãŒãªã©ã®ã»ãã¥ãªãã£ããŒã«ã®å©çšãæ€èšã«å€ããŸãã
ããã«ãçµç¹ã¬ãã«ã§é»åã¡ãŒã«èªèšŒèŠæ Œãæ¡çšããåä¿¡ã¡ãŒã«ãèªèšŒããå¿ èŠããããŸããã¡ãŒã«ã®èªèšŒã®æ段ã«ã¯ãDKIMïŒDomainKeys Identified MailïŒãDMARCïŒDomain-based Message Authentication, Reporting, and ConformanceïŒãªã©ããããŸãã
å人ã®å Žåã家æãå人ã«ãã£ãã·ã³ã°ã®ãªã¹ã¯ã«ã€ããŠç¥ãããããšãéèŠã§ããäŒæ¥ã¬ãã«ã§ã¯ããªã¹ã¯è»œæžå¯ŸçãšããŠå®æçãªåŸæ¥å¡ãžã®ãã£ãã·ã³ã°æå£ã«ã€ããŠã®ç ä¿®ãããã³æèåäžã«åããåšç¥ãäžå¯æ¬ ã«ãªããŸãã
ãããªãæ¯æŽãæ å ±ãå¿ èŠãªå Žåã¯ãOnGuardOnline.govãªã©ã®æ¿åºã€ãã·ã¢ããããŸãã¯Anti-Phishing Working Group Inc.ãªã©ã®çµç¹ã掻çšããŠãã ããããããã®å£äœã§ã¯ããã£ãã·ã³ã°æ»æã®çºèŠãåé¿ãå ±åã«é¢ãããã詳现ãªãªãœãŒã¹ãã¬ã€ãã³ã¹ãçšæããŠããŸãã
ãã£ãã·ã³ã°ã®çš®é¡
ãã£ãã·ã³ã°ã®æå£ã¯é²åããŠããããµã€ããŒç¯çœªè ã¯ããŸããŸãªæå£ãçšããŠããŸããéåžžããã£ãã·ã³ã°ã®çš®é¡ã¯ã¿ãŒã²ãããšæ»æãã¯ãã«ã«å¿ããŠåé¡ãããŸããããã«ã€ããŠãããã«è©³ããèŠãŠãããŸãããã
ã¯ããŒã³ãã£ãã·ã³ã°
æ»æè ã¯ã以åã«å®éã«éåä¿¡ããåãã®ãã£ãã¡ãŒã«ãçšãããã®å 容ãã³ããŒããŠç·šéãçŽããæªæã®ãããµã€ããžã®ãªã³ã¯ãè¿œå ããŸãã以åã®ãªã³ã¯ã誀ã£ãŠãããŸãã¯æå¹æéãåãããšããã¶ãããªã³ã¯ãæŽæ°ãããŸãã¯æ°ããªãªã³ã¯ãäœæãçŽãããšäž»åŒµããå ŽåããããŸãã
ã¹ãã¢ïŒæšçåïŒãã£ãã·ã³ã°
å人ãŸãã¯çµç¹ã«çŠç¹ãåœãŠãæ»æã®çš®é¡ã§ããã¹ãã¢æ»æã¯ãå人æ å ±ããããã¡ã€ãªã³ã°ãããŠãããããä»ã®çš®é¡ã®ãã£ãã·ã³ã°ãããå·§åŠãšãããŸãããŸã被害è ã«é¢ããæ å ±ïŒå人ã家æã®ååãªã©ïŒãåéãããã®ããŒã¿ã䜿çšããŠè¢«å®³è ãæªæã®ããWebãµã€ããžèªã蟌ã¿ãŸãã
ãã¡ãŒãã³ã°ïŒPharmingïŒ
DNSã¬ã³ãŒããæ¹ããïŒDNSãã£ãã·ã¥ãã€ãºãã³ã°ïŒããæ£èŠã®ãµã€ãã«ã¢ã¯ã»ã¹ã§ã¯ãªãäºåã«äœæããäžæ£ãªWebãµã€ãã«è»¢éããããã®ã§ãããŠãŒã¶ãŒèªèº«ãDNSã¬ã³ãŒãã管çããŠããããã§ã¯ãªããããé²åŸ¡ã®ãããããªãæãå±éºãªæ»æã®çš®é¡ãšãªããŸãã
ããšãŒãªã³ã°ïŒWhalingïŒ
CEOãæ¿åºé¢ä¿è ãªã©ãè£çŠã§éèŠãªå°äœã«ãã人ã ãæšçãšããã¹ãã¢ãã£ãã·ã³ã°ã®äžçš®ã§ãã
ãªãããŸãã¡ãŒã«
ãã£ãã·ã³ã°ã¡ãŒã«ã¯äžè¬çã«ãæ£åœãªäŒæ¥ãå人ãªãããŸããŸããŠéä¿¡ããŠããŸããäœãç¥ããªã被害è ã«æªæã®ãããµã€ããžã®ãªã³ã¯ãæ瀺ããå·§åŠã«åœè£ 现工ããããã°ã€ã³ããŒãžãèšããã°ã€ã³èªèšŒæ å ±ãå人æ å ±ãçã¿åºããŸãããã®ãããªãµã€ãã§ã¯ãå人æ å ±ãçã¿åºãããã€ã®æšéŠ¬ãããŒãã¬ãŒãªã©æªæã®ããã¹ã¯ãªãããã€ã³ã¹ããŒã«ãããŠããå ŽåããããŸãã
ãŠã§ããµã€ãã®ãªãã€ã¬ã¯ã
ãŠã§ããµã€ãã®ãªãã€ã¬ã¯ãã§ã¯ããŠãŒã¶ãŒãæå³ããURLãšã¯ç°ãªãURLã«èªå°ãããŸããæ§ã ãªè匱æ§ãæªçšããŠãªãã€ã¬ã¯ãèšå®ãåã蟌ã¿ããŠãŒã¶ãŒã®ã³ã³ãã¥ãŒã¿ãŒã«ãã«ãŠã§ã¢ãã€ã³ã¹ããŒã«ããããšããŸãã
ã¿ã€ãã¹ã¯ã¯ããã£ã³ã°ïŒURLãã€ãžã£ããã³ã°ïŒ
ã¿ã€ãã¹ã¯ã¯ããã£ã³ã°ã¯ãå€æ¥èªã®ã¹ãã«ãäžè¬çãªã¹ãã«ã®ééãããŸãã¯ãããã«å€ãããããã¬ãã«ãã¡ã€ã³ãå©çšããåœé ãŠã§ããµã€ãã«èªå°ããæå£ã§ããæ£èŠã®ãŠã§ããµã€ãã®ã€ã³ã¿ãŒãã§ã€ã¹ãæš¡å£ãããã¡ã€ã³ã䜿çšããURLã®ã¿ã€ããã¹ããŠãŒã¶ãŒã®èªã¿ééããªã©ãå©çšããŸãã
åœã®ææåºå
ææåºåãããã£ãã·ã³ã°ã«äœ¿ãããæå£ã®äžã€ãšãªã£ãŠããŸããææåºåãå©çšããããšã§ãã¿ã€ãã¹ã¯ã¯ããã£ã³ã°ãçããã¡ã€ã³ãµã€ãã®ïŒåœã®ïŒåºåãæ€çŽ¢çµæäžäœã«è¡šç€ºãããŸããããããåœãµã€ããGoogleã®æ€çŽ¢çµæã®äžäœã«è¡šç€ºãããããšããããŸãã
氎飲ã¿å Žåæ»æ
氎飲ã¿å Žåæ»æã§ã¯ãæ»æ察象ãŠãŒã¶ãŒãé »ç¹ã«ã¢ã¯ã»ã¹ããŠãããŠã§ããµã€ããç¹å®ããŸãããããããµã€ããã¹ãã£ã³ããŠè匱æ§ãæ€åºããæ»æ察象ãŠãŒã¶ãŒã次ã«ãã®Webãµã€ãã«ã¢ã¯ã»ã¹ããéãæ»æ察象ãŠãŒã¶ãŒæšçã«ããæªæã®ããã¹ã¯ãªãããã€ã³ã¹ããŒã«ããŸãã
ãªãããŸããšåœã®æ¯å
ãœãŒã·ã£ã«ã¡ãã£ã¢äžã§ã圱é¿åã®ãã人ç©ã«ãªãããŸããã®ã§ããæ»æè ãæåäŒæ¥ã®ãªãŒããŒã«ãªãããŸããæ¯åã®åºåãåºããããã®ä»ã®è©æ¬ºè¡çºãè¡ãããšããããŸãããœãŒã·ã£ã«ãšã³ãžãã¢ãªã³ã°ã«ãããã®æå£ã®è¢«å®³ãåãããããŠãŒã¶ãŒãæœåºããçãæã¡ã«ããŠæšçãšããããšãããããŸããæ£åŒãªèªèšŒæžã¿ã¢ã«ãŠã³ãããããã³ã°ãããŠãŒã¶ãŒåãå€æŽããŠèªèšŒæžã¿ã®ç¶æ ãç¶æããªããå®åšã®äººç©ã«ãªãããŸãããšããããŸãã
æè¿ã§ã¯DiscordãXãTelegramã®ãããªãã©ãããã©ãŒã ãæšçã«ãããã£ããã®ãªãããŸããå人ã®ãªãããŸããæ£èŠã®ãµãŒãã¹ã®æš¡å£ãªã©ã®è©æ¬ºè¡çºãè¡ãããŠããŸãã
æªæã®ããã¢ããªã±ãŒã·ã§ã³
æªæã®ããã¢ããªã䜿çšããŠãè¡åã®ç£èŠããæ©å¯æ å ±ãçã¿åºãããšããããŸããããããã¢ããªã¯ãäŸ¡æ Œãã©ããã³ã°ããŒã«ããŠã©ã¬ããããã®ä»ã®æå·è³ç£é¢é£ããŒã«ïŒæå·è³ç£ã®ååŒãä¿æã«çšããå©çšè ã®ãŠãŒã¶ãŒããŒã¹ããããã®ïŒãè£ ããŸãã
SMSãšé³å£°ãã£ãã·ã³ã°
ããã¹ãã¡ãã»ãŒãžã䜿çšãããã£ãã·ã³ã°ã®äžçš®ã§ãéåžžã¯SMSããã€ã¹ã¡ãã»ãŒãžãéããŠè¡ãããå人æ å ±ãæãåãããšããŠããŸãã
ãã£ãã·ã³ã°ãšãã¡ãŒãã³ã°ã®çžéç¹
ãã¡ãŒãã³ã°ããã£ãã·ã³ã°æ»æã®äžçš®ãšãšãããèŠæ¹ããããã®ã®ãã¡ã«ããºã ã¯ç°ãªã£ãŠããŸãããã£ãã·ã³ã°ãšãã¡ãŒãã³ã°ã®äž»ãªéããšããŠããã£ãã·ã³ã°ã§ã¯è¢«å®³è åŽã®é倱ãåå ãšãªãããšãæããããŸããå¯Ÿç §çã«ããã¡ãŒãã³ã°ã§ã¯è¢«å®³è åŽã«ã¯é倱ã¯ãªããæ£èŠã®Webãµã€ãã«ã¢ã¯ã»ã¹ããŠããã«ãããããããDNSã¬ã³ãŒããæ¹ãããããŠããããšã«ãã被害ã«ã€ãªãããŸãã
ãããã¯ãã§ãŒã³ãšæå·è³ç£åéã§ã®ãã£ãã·ã³ã°
ãããã¯ãã§ãŒã³æè¡ã¯ãã®åæ£åã®ç¹è³ªã«ãã匷åãªããŒã¿ã»ãã¥ãªãã£ãå®çŸããŠãããã®ã®ããããã¯ãã§ãŒã³åéã«ãããŠãããœãŒã·ã£ã«ãšã³ãžãã¢ãªã³ã°ããã£ãã·ã³ã°ã®æå£ã«å¯ŸããŠååãªèŠæãå¿ èŠã§ãããµã€ããŒç©ºéã§æèºããç¯çœªè ã¯ãå€ãã®å Žåã人éã«å æ¥åããè匱æ§ãæªçšããç§å¯éµããã°ã€ã³æ å ±ãæãåãããšããŸããã»ãšãã©ã®å Žåãè©æ¬ºè¢«å®³ã®åå ã¯äººçºçãã¹ãšãªã£ãŠããŸãã
è©æ¬ºåž«ã¯ããŠãŒã¶ãŒãéšããŠã·ãŒããã¬ãŒãºãèãåºããããåœã®ã¢ãã¬ã¹ã«è³éãééãããããšããŠããŸãã泚æãæããã»ãã¥ãªãã£äžã®ãã¹ããã©ã¯ãã£ã¹ã«åŸãããšã倧åã§ãã
ãŸãšã
çµè«ãšããŠããã£ãã·ã³ã°ãç解ããé²åããæå£ã«ã€ããŠæ å ±ãå ¥æãææ¡ããããšã¯ãå人æ å ±ãšè²¡åæ å ±ã®ä¿è·ç®¡çã«ãããŠæ¥µããŠéèŠã«ãªããŸããå ç¢ãªã»ãã¥ãªãã£å¯ŸçãåŠç¿ãã¢ãŠã§ã¢ãã¹ã®çµã¿åããã«ãããå人ã§ãããçµç¹ã§ããããåãããçžäºã«æ¥ç¶ãããããžã¿ã«äžçã§åžžã«ååšãç¶ãããã£ãã·ã³ã°ã®è åšããèªãã®ä¿è·ã«ã€ãªããã®ã§ãããSAFUãã§ãããããããåžžã«æèãé«ãæã£ãŠãã ããã
åèæç®
æå·è³ç£ãå®å šã«ä¿æããããã®5ã€ã®ãã³ã
ãã€ãã³ã¹ã¢ã«ãŠã³ãã®ã»ãã¥ãªãã£ã匷åãã5ã€ã®æ¹æ³
ãã¢ã»ããŒã»ãã¢ïŒP2PïŒååŒã§å®å šãä¿ã€æ¹æ³
å 責äºé ïŒãã®ã³ã³ãã³ãã¯ãäžè¬çãªæ å ±æäŸããã³åŠç¿çŽ æãšããŠã®ã¿ã®ç®çã§ãçŸç¶æ姿ãã«ãŠæäŸãããã®ã§ããããªãçš®é¡ã®è¡šæãŸãã¯ä¿èšŒãè¡ããã®ã§ã¯ãããŸããã財åçãæ³çããŸãã¯ãã®ä»ã®å°éçãªã¢ããã€ã¹ãšããŠè§£éãããã¹ãã§ã¯ãªããç¹å®ã®ååãŸãã¯ãµãŒãã¹ã®è³Œå ¥ã®æšå¥šãæå³ãããã®ã§ããããŸãããé©åãªå°éç顧åã«ç¬èªã«å©èšãæ±ããããã«ããŠãã ãããèšäºã第äžè ã®å¯çš¿è ã«ãã£ãŠå¯çš¿ãããŠããå ŽåãæèšãããŠããèŠè§£ã¯ç¬¬äžè ã®å¯çš¿è ã®ãã®ã§ãããå¿ ããããã€ãã³ã¹ã¢ã«ãããŒã®èŠè§£ãåæ ãããã®ã§ã¯ãããŸããã詳现ã¯ããã¡ãã®å 責äºé å šæããèªã¿ãã ãããããžã¿ã«è³ç£ã®äŸ¡æ Œã¯ã倧ããå€åããå¯èœæ§ããããŸããæè³ããæå·è³ç£ã®äŸ¡å€ã¯äžäžããå¯èœæ§ããããåœåã®æè³é¡ãåãæ»ãããšãã§ããªãå¯èœæ§ããããŸããæè³å€æã«ã€ããŠã¯ãèªèº«ãåç¬ã§è²¬ä»»ãè² ãããã€ãã³ã¹ã¢ã«ãããŒã¯ã客æ§ã被ãå¯èœæ§ã®ããæ倱ã«å¯ŸããŠè²¬ä»»ãè² ããŸããããã®è³æã¯ã財åçãæ³çããŸãã¯ãã®ä»ã®å°éçãªã¢ããã€ã¹ãšããŠè§£éãããã¹ãã§ã¯ãããŸããã詳现ã¯ãå©çšèŠçŽãšãªã¹ã¯ã«é¢ããèŠåããåç §ãã ããã