ããã«ã¡ã¯ãIIJA Webinar äºåå±ã§ããã
2022幎2æ17æ¥ã«éå¬ããIIJAãŠã§ãããŒïŒä»äžåºŠèŠçŽãããã¡ãŒã«ã»ãã¥ãªã㣠ããã£ããã¢ããããŸãããã
ã¡ãŒã«ã®ã»ãã¥ãªãã£å¯Ÿçã¯ããå®æœæžã¿ïŒã§ãã£ãŠãããã£ãã·ã³ã°ã¡ãŒã«ãããžãã¹ã¡ãŒã«è©æ¬ºãããã«ã¯ã©ã³ãµã ãŠãšã¢è¢«å®³ã倧ãããªãäžæ¹ã®ä»ããã²æ¬ããã°ãåèã«ããŠã¿ãŠãã ããã
æ¬ãŠã§ãããŒã§ã¯ãæšä»ã®è åšã¡ãŒã«ãã©ã®ãããªæ»æãè¡ãã®ããIIJã®ã¯ã©ãŠãåçµ±åã¡ãŒã«ã»ãã¥ãªãã£ãµãŒãã¹ïŒIIJã»ãã¥ã¢MXãµãŒãã¹ã䜿ã£ãŠãã©ã®ãããªå¯Ÿçãã§ããã®ããã玹ä»ããŸããã
ã©ããªè åšã¡ãŒã«ãåºåã£ãŠããïŒ
1ïŒãã£ãã·ã³ã°ã¡ãŒã«
ããã£ãã·ã³ã°ããšã¯ãå®åšããçµç¹ã»äººãããã£ãŠããŠãŒã¶ããŒã ããã¹ã¯ãŒããã¢ã«ãŠã³ãIDãATMã®æ蚌çªå·ãã¯ã¬ãžããã«ãŒãçªå·ãšãã£ãå人æ å ±ãè©åããè¡çºã§ãã
â2020幎ã®Verizonã«ããData Breach Investigation Reportã¯ããœãŒã·ã£ã«ãšã³ãžãã¢ãªã³ã°ã䜿ã£ãè åšæ»æã®96ïŒ ã¯Emailããã¯ããŸã£ãŠããããã®Emailã®ã»ãšãã©ããã£ãã·ã³ã°ã¡ãŒã«ãšå ±åããŸããã
â2020幎12æã®ãã£ãã·ã³ã°å¯Ÿçåè°äŒã®ã¬ããŒããããã2020幎1æïœ12æã«ãããŠå³è©ãããã§ãã£ãã·ã³ã°å ±å件æ°ãå¢ããŠããããšãããããŸãã
è¬åž«ã®ã¡ãŒã«ããã¯ã¹ã«å±ããããã倧æã¯ã¬ãžããã«ãŒãäŒç€Ÿ(ãããã£ãŠããã»ã»)ããã®ã¡ãŒã«ãéããŠã¿ããšãæ¬æå ã«ã¯ãªãã¯ãä¿ãURLãèšèŒãããŠããŸãããã®URLã®ãã¡ã€ã³ã§ãããäžèŠãããšã«ãŒãäŒç€Ÿã®ãã¡ã€ã³ã«èŠããŸãããæåŸã«ãªã«ããæååããã£ã€ããŠããŸããã¡ãã£ãšãããããã
ãã®ã¡ãŒã«ãå¥ã®è§åºŠãããã§ãã¯ããŠã¿ããšãå®ã¯ãéä¿¡ãã¡ã€ã³èªèšŒãã«å€±æããŠããŸãããæ¬æ¥ã®ã«ãŒãäŒç€Ÿã®ãã¡ã€ã³ãšã¯å¥ã®ã¡ãŒã«ãµãŒããŒããéä¿¡ãããããªãããŸããã¡ãŒã«ã§ãããæ¬æäžã®URLãã¯ãªãã¯ãããšãã£ãã·ã³ã°ã«ã²ã£ãããã»ã»ãšãããã®ã§ããã
2ïŒMicrosoft Officeãã¡ã€ã«ãæ·»ä»ããã¡ãŒã«
2019幎ã®Verizonã®Data Breach Investigation Reportã«ãããšããã«ãŠãšã¢ã®ææçµè·¯ã¯å§åçã«Emailçµç±ã§ãããšããçµæã§ãå šäœã®94ïŒ ãå ããŸããã
ã§ã¯ãã©ã®ãããªãã¡ã€ã«ã¿ã€ãããã«ãŠãšã¢ãšããŠäœ¿ããããããšãããšãäžçªå€ãã£ãã®ãMicrosoft Officeãã¡ã€ã«ã§ãããããã®ãã¡ã€ã«ã®ãã¯ãéšåã«ãã«ãŠãšã¢ãä»èŸŒãã ããããŠã³ããŒããä¿ãå±éºãªã³ãŒããåã蟌ãããšã§æ»æãä»æããŠããŸãã
3ïŒBECã¡ãŒã«
BECãšã¯ãBusiness Email Compromiseãã®ç¥ã§ãè©æ¬ºã¡ãŒã«ã®1ã€ã§ãã
ã¢ã¡ãªã«FBIã®æ å ±ã«ãããšãBEC被害é¡ã¯æ¯å¹Žããªãã®ãŒãã«å¢å ãã2020幎ã¯1.8æ¶ãã«ã®è¢«å®³ãå ±åãããŠããŸãã倧æèªç©ºäŒç€Ÿãæ¿åºãæè³ãã¡ã³ãã®BEC被害ã«ã€ããŠãã¥ãŒã¹ã§ãå ±éãããŸããã
BECæ»æã®1äŸã玹ä»ããŸãïŒ
æ¬ç€Ÿæ åœè ã«ãªãããŸããã¡ãŒã«ããæ¯ç€Ÿã®çµçæ åœã«éä¿¡ãããŠããŠãæ¬ç€Ÿã®æ¯æãå£åº§ãå€æŽã«ãªããŸãããæ¯æãã¯ãã¡ããžãããšããããŸã§ãšã¯ç°ãªãå£åº§ãžã®ééãäŸé ŒãããŸãã
æ¬ç€Ÿã ãšããã¡ãŒã«ã®éä¿¡å ãçãããšãªãããã£ãããšæå®ã®å£åº§ã«æ¯æé¡ãæ¯ã蟌ãã§ããŸã£ãŠãããæ¬ç©ã®æ¬ç€Ÿæ åœè ããæ¯ã蟌ã¿ããªããšãã確èªãæ¥ãŠããã®å£åº§ãæ»æè ã®ãã®ã ã£ããšããããããšãããã®ã§ãã
4ïŒã©ã³ãµã ãŠãšã¢ã®çºç«¯ãšãªãã¡ãŒã«
è åšã¡ãŒã«ã®å®äŸã®æåŸã«ãã©ã³ãµã ãšã¢ã玹ä»ããŸãã
ã©ã³ãµã ãŠãšã¢ã¯ã身代é (Ransom) ãšãœãããŠã§ã¢ (Software) ãçµã¿åãããã£ãé èªã§ãããŠã€ã«ã¹ããããŸãããææãããšPCäžã®ããŒã¿ãåæã«æå·åãããŠããŸãã埩æ§ãããã£ãã身代éãæ¯æããšè è¿«ãããŸãã
ã©ã³ãµã ãŠãšã¢ãšããŠã¯ãã¯ãã¯ã©ã€ (WannaCry) ãæåã§ããã2020幎åŸåã«ã¯ã©ã°ãããã«ãŒ (Ragnar Locker) ãšããã©ã³ãµã ãŠãšã¢ã«ãã倧ããªè¢«å®³ããããŸãããã©ã°ãããã«ãŒã«ææãããšãç¯è¡å£°æã衚瀺ããã身代éãæãããã«ãšããè è¿«ãšãè©åããããŒã¿ãã€ã³ã¿ãŒãããã«å ¬éããããšãã2éã®è è¿«ãåããŸãã
ã©ã³ãµã ãŠãšã¢ã®äŸµå ¥çµè·¯ãšããŠã¯Emailãæãå€ããEmailæ¬äœã«ããŠã³ããŒããŒãä»èŸŒãã ãã¡ã€ã«ãæ·»ä»ããããã¡ãŒã«æ¬æã«ããŠã³ããŒãçšã®ãªã³ã¯ãèšèŒããŸããã©ã°ãããã«ãŒãä»èŸŒãŸãããã¡ã€ã«åœ¢åŒã«ã¯å€ã ãããŸãããæåãªã®ã¯Microsoft Officeã®ã¯ãŒããPDFã§ããã¯ãã»ã¹ã¯ãªãããå©çšãããŸãã
ããã«ã2021幎ã«èµ·ããã¢ã¡ãªã«ã®ã³ããã¢ã«ãã€ãã©ã€ã³ã®æ»æã§äœ¿ãããã®ãããŒã¯ãµã€ã (Darkside) ã§ããããŒã¯ãµã€ãããã«ãŠãšã¢ã®1ã€ã§ãããRaaS (Ransomware as a Service) ã䜿ã£ãŠããããšãããŒã¿ãæå·åãã埩å·åããããã®èº«ä»£éãšããŠä»®æ³é貚 (BitCoin) ãèŠæ±ããããšãè©åããããŒã¿ã®æŽé²ã®ç€ºåãããã«DDoSæ»æãä»ãå ããããããšãç¹åŸŽã§ãã
ïŒïŒïŒã®è åšã¡ãŒã«å¯Ÿç
äžèšã§çŽ¹ä»ããæ°ã ã®è åšã¡ãŒã«ãžã®å¯Ÿçã¯ã©ããããããã®ã§ããããïŒã
IIJãæäŸããã¯ã©ãŠãåçµ±åã¡ãŒã«ã»ãã¥ãªãã£ãµãŒãã¹ïŒIIJã»ãã¥ã¢MXãµãŒãã¹ã掻çšããïŒã€ã®å¯Ÿçãšãã©ã¹ã¯ã³ã®å¯Ÿçã玹ä»ããŸããã
éä¿¡ãã¡ã€ã³èªèšŒã®æŽ»çš
è€æ°ãã³ããŒæè¡ã®å€æ®µã¢ã³ããŠã€ã«ã¹ã»ã¢ã³ãã¹ãã
ãã¯ãé€å»ã«ããOffice ãã¡ã€ã«ã®ç¡å®³å
ãã©ã¹ãçµç¹çãªå¯ŸçïŒ
éä¿¡ãã¡ã€ã³èªèšŒãã£ã«ã¿
ãéä¿¡ãã¡ã€ã³èªèšŒãã¯è³æ £ããªãèšèãããããŸãããããªãããŸããèŠæããã¯ãããžãŒã§ãã
ãã£ãã·ã³ã°ããBECãããªãããŸãããã£ãŠããæãç«ã€ã®ã§ããªãããŸããæ€ç¥ããæè¡ã䜿ã£ãŠå¯ŸçããããšãããããããŸãã
IIJã»ãã¥ã¢MXãµãŒãã¹ã§ã¯ãéä¿¡ãã¡ã€ã³èªèšŒãã£ã«ã¿ããå©çšããããšã§å¯Ÿçã§ããŸããéä¿¡ãã¡ã€ã³èªèšŒãã£ã«ã¿ã¯ãéä¿¡ãã¡ã€ã³ãæ€èšŒããè©ç§°ãããŠããããæ€ç¥ããŸããè©ç§°ãæ€ç¥ãããšã察象ã¡ãŒã«ãéé¢ããã件åã«æååãè¿œå ããŠé éãããæ絶ãã (åãåããªã) ãšããã¢ãããŒããéžæã§ããŸãã
å€æ®µæè¡ã§æ€ç¥çã¢ãã
ç¶ããŠãè€æ°ã®ãŠã€ã«ã¹å¯Ÿç補åãå€æ®µã«äœ¿ã£ãŠè åšã¡ãŒã«ã®æ€ç¥çãã¢ããããŸãããïŒãšãããææ¡ã§ãã
1瀟ã®è£œåã ãã§ã¯ãæ¢ãããããŠã€ã«ã¹ãéãããŠããŸãããšããã®ãçŸå®ã§ãã
ã¢ã³ããŠã€ã«ã¹ã®æè¡ãšã¯ãã»ãã¥ãªãã£ãã³ããŒããŠã€ã«ã¹ã®æ€äœãååŸããŠããã¿ãŒã³ãã¡ã€ã«ãããŒã¿ããŒã¹ã«ç»é²ããããšã§ãç»é²ãããŠãããŠã€ã«ã¹ãšåããŠã€ã«ã¹ãæ€ç¥ãããã®ã§ããã©ããªè£œåã§ãã£ãŠãã1瀟ã®è£œåããã¹ãŠã®ãŠã€ã«ã¹ãã«ããŒã§ããããã§ã¯ãããŸããã補åæ¯ã«ã«ããŒç¯å²ã察çãããã¿ã€ãã³ã°ãéãã®ã§ãè€æ°ã®è£œåãéãã (å€æ®µã«ãã) ããšã§ãã«ããŒç¯å²ãã²ãããŠã¿ã€ã ãªãŒã«æ€ç¥çãã¢ããããããšãã§ããŸãã
IIJã»ãã¥ã¢MXãµãŒãã¹ã¯è€æ°ã®ã¢ã³ããŠã€ã«ã¹è£œåãå€æ®µã§äœ¿ã£ãŠããŸããããšãã°ã1瀟ã®ã¢ã³ããŠã€ã«ã¹ã§ã¯æ€ç¥ã§ããªããŠããä»ç€Ÿã®ã¢ã³ããŠã€ã«ã¹ã§æ€ç¥ã§ããã°ããµãŒãã¹å šäœãšããŠã¯ãæ€ç¥ã§ãããããšã«ãªããŸãããããå€æ®µã®ã¢ã³ããŠã€ã«ã¹ã䜿ãã¡ãªããã§ãã
ã¹ãã ãåæ§ã«ãå€æ®µã§ã¢ã³ãã¹ãã æè¡ã䜿ã£ãŠããŸããã¢ã³ãã¹ãã ã®ãšã³ãžã³ãå瀟ããããã¢ãããŒããéã£ãŠããŸããããã«ãã€ã³ã¿ãŒããããµãŒãã¹ãããã€ããŒã§ããIIJã¯ãç¬èªã®ããã¯ããŒã³ãããã¯ãŒã¯ããããŒãžãã»ãã¥ãªãã£ãµãŒãã¹ãæäŸããŠããŸãããããŠãããã§åéãããæ§ã ãªæ°ããè åšæ å ±ãšç¬èªã®å¯ŸçãIIJã»ãã¥ã¢MXãµãŒãã¹ã«åæ ããŠããŸãã
ãã¯ããŠã€ã«ã¹ã®ç¡å®³å
Microsoft Officeã®ãã¡ã€ã« (ã¯ãŒãããšã¯ã»ã«ããã¯ãŒãã€ã³ã) ããã³PDFã¯ãããžãã¹ã§å€ãå©çšãããŸããããããã®ãã¡ã€ã«ãããã«ãŠãšã¢ãæã¡èŸŒãŸããŸãããã«ãŠãšã¢ã®éã³å±ã¯ãã¯ããŠã€ã«ã¹ãäžçªå€ãã§ãã
ãããã£ãããžãã¹ãã¡ã€ã«ããç¡å®³åããããã£ã«ã¿ã䜿ããæ°çš®ã®å±éºãªãã«ãŠãšã¢ãå«ãŸãããã¯ãéšåãéæŠè£ åããŠå®å šãªãã¡ã€ã«ã«å€ããæè¡ããã¯ãé€å»ãã£ã«ã¿ã§ããã®ãã£ã«ã¿ã®å©çšã3ã€ãã®å¯ŸçãšããŠããããããŸãã
ãã¯ãé€å»ãã£ã«ã¿ã¯ããã¡ã€ã«ã«ãã¯ããã€ããŠãããã©ãããæ€ç¥ãã次ã®åäœãæå®ã§ããŸãããã¡ã€ã«ãããã¯ããé€å»ããããéžã¶ããšã§ãã¡ã€ã«ãéæŠè£ åããããšãã§ããŸãã
æ°å¹Žåã«æµè¡ãããšã¢ããã (Emotet) ãŠã€ã«ã¹ã¯ããã¯ãä»ãã¯ãŒããã¡ã€ã«ãšããŠé åžãããŸããããã¯ãé€å»ãã£ã«ã¿ã䜿ãããšã§ããããã£ããã¯ãã䜿ã£ããŠã€ã«ã¹ãäžç¶²æå°œã«ãã¹ãŠç¡å®³åããããšãã§ããŸãã
ããŒãã¯ïŒçµç¹çãªå¯Ÿç
æåŸã«ãIIJã»ãã¥ã¢MXãµãŒãã¹ã§ã®å¯Ÿçã§ã¯ãªããçµç¹çãªå¯Ÿçã«ã€ããŠè§ŠããŸãããã¡ãã¯åçµç¹ã§ã®å¯Ÿçå®è¡ãå¿ èŠã§ãã
BECè©æ¬ºã«åããããã«ã2ç¹ã察çãæ€èšããããšãã§ãããšæããŸãã
1ã€ç®ã¯ãæè¡çãªããšã§ã¯ãªãã§ããã瀟å ããã»ã¹ã®äžã§æ¯ã蟌ã¿æã¯å¿ ã2人以äžã®çœ²åã»æ¿èªãå¿ èŠã«ãããããŒã«ããããšã
2ã€ç®ã¯ãåŸæ¥å¡ãžã®æè²ã»èšç·Žã§ããè©æ¬ºã®æå£ãç¥ã£ãŠããããšã§ãããïŒãšæ°ã¥ãããããªãããŸãã第3è ãžçžè«ãã§ããããã«ãªãã®ã§ã¯ãªãã§ããããã
ãŸãšã
IIJã»ãã¥ã¢MXãµãŒãã¹ã§ã§ããããããã®è åšã¡ãŒã«å¯Ÿçã§ãã
ã玹ä»ãã察çãæ¬ãµãŒãã¹ã ãã§å¯Ÿå¿ã§ããŸãïŒ
IIJã»ãã¥ã¢MXãµãŒãã¹ã¯SaaS/ã¯ã©ãŠãåã®ãµãŒãã¹ã§ãã
æ¢åã§å©çšãããŠããã¡ãŒã«ã·ã¹ãã ã«ãä»ãå ããŠããå©çšããã ããŸããã¡ãŒã«åä¿¡æã®æ©èœãšãã¡ãŒã«ãéä¿¡ããæã®æ©èœãšãæ¬åœã«ããããã®æ©èœããããŸããããã«ãå€åœ©ãªãªãã·ã§ã³æ©èœãä»»æã§è¿œå ããŠãå©çšããã ãããšãã§ããŸãã
çŸåšãIIJã»ãã¥ã¢MXãµãŒãã¹ã¯ãæ¥æ¬åœå ã·ã§ã¢No.1ïŒã°ããŒãã«ãå«ããå€ãã®ã客æ§ã«ãå©çšé ããŠããŸããIIJ ã»ãã¥ã¢MXã«é¢ããã質åããçžè«ã¯ããã€ã§ããæ°è»œã«Webãã©ãŒã ãããååããã ããããåŸ ã¡ããŠãããŸãã
æåŸãŸã§ãèªã¿ããã ããŸããŠãããããšãããããŸããïŒ
ãŠã§ãããŒè¬åž«
ä¹ ä¿ç° ç¯å€«
æ ªåŒäŒç€Ÿã€ã³ã¿ãŒãããã€ãã·ã¢ãã£ã
ãããã¯ãŒã¯æ¬éš
ãµãŒãã¹æšé²éšãã·ãã¢ãšã³ãžãã¢
IIJ Americaã§ã¯ãæ¯ææ§ã ãªãããã¯ãåãäžããŠãŠã§ãããŒãéå¬ããŠããŸãã
IIJ America ãã¥ãŒã¹ã¬ã¿ãŒãžãç»é²ããã ããšããŠã§ãããŒéå¬ã®ãç¥ããããå±ãããŸãã
ãã¥ãŒã¹ã¬ã¿ãŒãç»é²ã¯ãã¡ãããïŒ