æè¿ããèããã¹ããã·ã³ã°ããäžäœã©ããªãã®ãªã®ãããããããã解説ããŸãïŒ
ã¹ããã·ã³ã°ã£ãŠäœïŒ ð€
ã¹ããã·ã³ã°ïŒSmishingïŒãšã¯ãSMSïŒã·ã§ãŒãã¡ãã»ãŒãžãµãŒãã¹ïŒãå©çšãããã£ãã·ã³ã°è©æ¬ºã®ããšã§ãããã£ãã·ã³ã°è©æ¬ºã¯ãã¡ãŒã«ãªã©ã䜿ã£ãŠåœã®Webãµã€ãã«èªå°ããå人æ å ±ïŒIDããã¹ã¯ãŒããã¯ã¬ãžããã«ãŒãæ å ±ãªã©ïŒãçã¿åãè©æ¬ºã®ææ³ã§ãããã¹ããã·ã³ã°ã¯ãã®SMSçãšããããã§ãããSMSããšããã£ãã·ã³ã°ïŒPhishingïŒããçµã¿åãããŠäœãããé èªãªãã§ããã
ã¹ããã«å±ãSMSã¯ãã¡ãŒã«ãããéå°çãé«ããšèšãããŠããŸãããã®ãããæ»æè ã¯ãã®ç¹ãæªçšããSMSã§åœã®ã¡ãã»ãŒãžãéã£ãŠããã®ã§ããé»è©±çªå·ãããããã°ã¡ãã»ãŒãžãéããŠããŸãæ軜ãããã¹ããã·ã³ã°ãå¢å ããŠããçç±ã®äžã€ãšèããããŸãã
ðš 泚æïŒ
ã¹ããã·ã³ã°ã¯ãç§ãã¡ã®èº«è¿ãªã¹ãããçã£ããµã€ããŒæ»æã§ããæå£ãç¥ã£ãŠããã£ãã察çããŸãããïŒ
ã©ããªæå£ãããã®ïŒ ð
ã¹ããã·ã³ã°ã®ç¯äººã¯ãå®åšããäŒæ¥ãå ¬çæ©é¢ã«ãªãããŸããŠãç§ãã¡ãã ãŸãããšããŠããŸãããã䜿ãããæå£ãèŠãŠã¿ãŸãããã
ãªãããŸãã®çš®é¡ | ããããã¡ãã»ãŒãžäŸïŒæ¶ç©ºïŒ | çã |
---|---|---|
å® é æ¥è ð | ãã客æ§å®ã«ãè·ç©ã®ãå±ãã«ããããŸãããäžåšã®çºæã¡åž°ããŸãããäžèšããã確èªãã ãããã | åœãµã€ãã§å人æ å ±ãå ¥åããããäžæ£ãªã¢ããªïŒãã«ãŠã§ã¢ïŒãã€ã³ã¹ããŒã«ãããã |
éèæ©é¢ïŒéè¡ãã¯ã¬ãžããã«ãŒãäŒç€ŸïŒ ð³ | ããããéè¡ãéèŠãªãç¥ããïŒã¢ã«ãŠã³ããäžæ£å©çšã®å¯èœæ§ããããŸããè³æ¥ã確èªãã ãããã ãã客æ§ã®ã¯ã¬ãžããã«ãŒãã®ãå©çšãäžéšå¶éããŠãããŸãã詳现ã¯ãã¡ããã |
åœãµã€ãã§å£åº§æ å ±ãæ蚌çªå·ãã¯ã¬ãžããã«ãŒãæ å ±ããã°ã€ã³IDã»ãã¹ã¯ãŒããå ¥åãããã |
ECãµã€ã ðïž | ããâ³â³ã¹ãã¢ãã客æ§ã®ã¢ã«ãŠã³ãã§ç°åžžãªãã°ã€ã³ãæ€åºãããŸãããã»ãã¥ãªãã£ç¢ºèªããé¡ãããŸããã | åœãµã€ãã§ãã°ã€ã³IDã»ãã¹ã¯ãŒããäœæãã¯ã¬ãžããã«ãŒãæ å ±ãå ¥åãããã |
éä¿¡ãã£ãªã¢ïŒæºåž¯é»è©±äŒç€ŸïŒ ð± | ããâ¡â¡ã¢ãã€ã«ããå©çšæéãé«é¡ã«ãªã£ãŠããŸããã確èªãã ãããã ãæªæãæéããããŸããæ¬æ¥äžã«æ¯æããªãå Žåãå©çšãåæ¢ããŸããã |
åœãµã€ãã§å人æ å ±ãæ¯æãæ å ±ãå ¥åããããæ¶ç©ºã®æéãè«æ±ããã |
å ¬çæ©é¢ïŒåœçšåºãä¿å¥æãªã©ïŒ ðïž | ãçšéã®éä»éããããŸããæç¶ãã¯ãã¡ããã ã絊ä»éã®ç³è«æéãè¿«ã£ãŠããŸããã確èªãã ãããã |
åœãµã€ãã§å人æ å ±ïŒãã€ãã³ããŒãå£åº§æ å ±ãªã©ïŒãå ¥åãããã |
ãããã®ã¡ãã»ãŒãžã¯ãåä¿¡è ãçŠãããããäžå®ã«ããããããå 容ã§ããç·æ¥ããéèŠããèŠåããšãã£ãèšèã䜿ã£ãŠãããã«ãªã³ã¯ãã¯ãªãã¯ãããããšããŸãããªã³ã¯å ã¯æ¬ç©ãã£ããã®åœãµã€ãïŒãã£ãã·ã³ã°ãµã€ãïŒã§ããã£ããæ å ±ãå ¥åããŠããŸããšãæªçšãããŠããŸãå±éºããããŸããð±
ç¹ã«ãå® é æ¥è ãè£ ãæå£ã¯2018幎é ããå€ãå ±åãããŠããã4幎é£ç¶ã§æãå€ãæå£ãšãèšãããŠããŸãããŸããé»åäŒç€Ÿãè£ ã£ãŠãåé»ããããªã©ãšäžå®ãç œãæå£ã確èªãããŠããŸãã
ã©ããã£ãŠèŠåããã®ïŒ ð
æªããSMSãèŠåããããã®ãã€ã³ããããã€ã玹ä»ããŸãã
- ç¥ããªãéä¿¡å
ããå±ããŠããªããïŒ ð€
ç»é²ããèŠãã®ãªãäŒæ¥ããå¿åœããã®ãªãå 容ã®SMSã¯çããŸãããã - ç·æ¥æ§ãé床ã«ç
œã£ãŠããªããïŒ â°
ãä»ããããæ¬æ¥äžããèŠåããã¢ã«ãŠã³ãåæ¢ããªã©ã®èšèã§çŠãããããšããŠãããèŠæ³šæã§ãã - å人æ
å ±ãèªèšŒæ
å ±ãæ±ããŠããªããïŒ ð
SMSã§IDããã¹ã¯ãŒããæ蚌çªå·ãã¯ã¬ãžããã«ãŒãæ å ±ãªã©ãçŽæ¥èããŠããããšã¯ãæ£èŠã®ãµãŒãã¹ã§ã¯ãŸããããŸããã - æ¥æ¬èªãæç« ããããããªããïŒ ð
äžèªç¶ãªæ¥æ¬èªãã誀åè±åãå€ãå Žåã¯æªãããµã€ã³ã§ãã - URLãäžèªç¶ã§ã¯ãªããïŒ ð
- å ¬åŒã®URLãšæ¯ã¹ãŠãã¹ãã«ã埮åŠã«éãïŒäŸ: `amazom` vs `amazon`ïŒã
- æå³ã®ãªãæååããæ°åã®çŸ åã«ãªã£ãŠããã
- ççž®URLïŒbit.lyãªã©ïŒã䜿ãããŠããïŒæ£èŠã®ãµãŒãã¹ã䜿ãããšããããŸããã泚æãå¿ èŠã§ãïŒã
被害ã«éããªãããã®å¯Ÿçã¯ïŒð¡ïž
ã¹ããã·ã³ã°ã®è¢«å®³ãé²ãããã«ã以äžã®å¯Ÿçãå¿ãããŸãããã
ð¡ 察çã®ãã€ã³ã
- ãæéèŠãSMSå
ã®URLã¯å®æã«ã¯ãªãã¯ããªãïŒ
å°ãã§ãæªãããšæãããã絶察ã«ã¯ãªãã¯ããªãã§ãã ãããã¡ãã»ãŒãžãéãã ãã§ã¯è¢«å®³ã¯çºçããŸããã - å人æ
å ±ããã¹ã¯ãŒããå
¥åããªãïŒ
åœãµã€ãã«èªå°ãããŠããIDããã¹ã¯ãŒããã¯ã¬ãžããã«ãŒãæ å ±ãªã©ã絶察ã«å ¥åããªãã§ãã ããã - å
¬åŒã¢ããªãããã¯ããŒã¯ããã¢ã¯ã»ã¹ããïŒ
ãµãŒãã¹ã®ç¢ºèªãæç¶ãã¯ãSMSã®ãªã³ã¯ããã§ã¯ãªããå¿ ãå ¬åŒãµã€ããå ¬åŒã¢ããªãäºåã«ç»é²ããããã¯ããŒã¯ããè¡ããŸãããã - OSãã¢ããªãææ°ã®ç¶æ
ã«ä¿ã€ïŒ
ã¹ããã®OSãã¢ããªã«ã¯ã»ãã¥ãªãã£äžã®åŒ±ç¹ïŒè匱æ§ïŒãèŠã€ããããšããããŸããåžžã«ææ°çã«ã¢ããããŒãããŠã匱ç¹ããªãããŠãããŸãããã - ã»ãã¥ãªãã£ãœããã»ã¢ããªãå°å
¥ããïŒ
ã¹ããåãã®ã»ãã¥ãªãã£ãœãããã¢ããªãå°å ¥ããäžæ£ãªãµã€ããžã®ã¢ã¯ã»ã¹ããã«ãŠã§ã¢ã®äŸµå ¥ãé²ããŸãããã - äºæ®µéèªèšŒïŒå€èŠçŽ èªèšŒïŒãèšå®ããïŒ
ãµãŒãã¹ã察å¿ããŠããã°ãIDã»ãã¹ã¯ãŒãã ãã§ãªããSMSèªèšŒã³ãŒããªã©ãçµã¿åãããäºæ®µéèªèšŒãèšå®ããŸããããäžãäžãã¹ã¯ãŒããæŒããŠããäžæ£ãã°ã€ã³ãé²ãããããªããŸãã - æªããSMSã¯ç¡èŠã»åé€ããïŒ
äžå¯©ãªSMSã¯ç¡èŠããããåé€ããã®ãäžçªã§ãã - éä¿¡å
ã«çŽæ¥åãåãããå Žåã¯å
¬åŒçªå£ãžïŒ
SMSã®å 容ãæ¬åœã確èªãããå Žåã¯ãSMSã«èšèŒãããé£çµ¡å ã§ã¯ãªããå¿ ãäŒæ¥ã®å ¬åŒãµã€ããªã©ã§ç¢ºèªããæ£èŠã®åãåããçªå£ïŒé»è©±çªå·ãã¡ãŒã«ã¢ãã¬ã¹ïŒãå©çšããŸãããã - æ
å ±ãå
±æããïŒ
家æãå人ãè·å Žã®ååãªã©ãšã¹ããã·ã³ã°ã®æå£ã察çã«ã€ããŠæ å ±ãå ±æãã泚æåèµ·ããããŸãããã
äžãäžãURLãã¯ãªãã¯ããŠããŸã£ãããæ å ±ãå ¥åããŠããŸã£ããããå Žåã¯ãããã«ä»¥äžã®å¯Ÿå¿ãåããŸãããã
- äžæ£ãªã¢ããªãã€ã³ã¹ããŒã«ããŠããŸã£ãå Žåã¯ãããã«ã¹ãããæ©å ã¢ãŒãã«ããŠãããã¯ãŒã¯ããé®æããã¢ããªãã¢ã³ã€ã³ã¹ããŒã«ããã
- å人æ å ±ããã¹ã¯ãŒããå ¥åããŠããŸã£ãå Žåã¯ãããã«ãã¹ã¯ãŒããå€æŽããé¢é£ãããµãŒãã¹ïŒéè¡ãã¯ã¬ãžããã«ãŒãäŒç€Ÿãªã©ïŒã«é£çµ¡ããŠæ瀺ãä»°ãã
- èŠå¯åºã®ãµã€ããŒç¯çœªçžè«çªå£ããæ¶è²»ç掻ã»ã³ã¿ãŒãªã©ã«çžè«ããã
ãŸãšã
ã¹ããã·ã³ã°ã¯ãSMSãšãã身è¿ãªããŒã«ãæªçšããå·§åŠãªè©æ¬ºã§ããæå£ã¯ã©ãã©ãæ°ãããªã£ãŠããŸãããåºæ¬çãªå¯Ÿçã¯ãæªããSMSã®URLã¯ã¯ãªãã¯ããªãããå®æã«å人æ å ±ãå ¥åããªããããšã§ãã
ãèªåã¯å€§äžå€«ããšæãããåžžã«æ³šæãæããæªãããšæãããç«ã¡æ¢ãŸã£ãŠç¢ºèªããç¿æ £ãã€ããŸãããããã®èšäºããçããã®ã¹ããã©ã€ããå®ãäžå©ãšãªãã°å¹žãã§ããð
ã³ã¡ã³ã