
GMO互联网集团已要求日本政府对其一项服务的黑客攻击动用新的主动网络防御权力。该公司于周六提出这一请求,此前攻击者提出了勒索金钱的要求。
GMO Internet Group has asked Japan’s government to use its new active cyber defence powers against hackers who breached one of its services. The company made the request on Saturday, after the attackers demanded money.
在周六提交的一份证券交易所文件中,GMO表示希望国家机构追踪、封锁并瘫痪攻击者的基础设施。该公司称,这将是该权力的首次使用,该权力于10月1日在数据泄漏浪潮中生效。
In astock exchange filingon Saturday, GMO said it wants state agencies to trace, block, and neutralise the attackers’ infrastructure. It said this would be the first use of the powers, which took effect on 1 October amid awave of data leaks.
此次泄露袭击了Onamae.com桌面云服务。该服务向全天候运行MT4和MT5等自动化外汇交易工具的交易员出租Windows服务器。
The breach hit Onamae.com Desktop Cloud. The service rents out Windows servers to traders who run automated foreign-exchange tools such as MT4 and MT5 around the clock.
此前在一份事故报告中,GMO表示多达2.6739万台服务器可能受到影响。入侵者在部分客户的服务器上植入了恶意软件,这可能导致其中存储的交易信息曝光。从10月21日开始,客户报告了非本人进行的交易。
Up to 26,739 servers may have been affected, GMO said in anearlier incident report. The intruders planted malicious software on some customers’ servers, which may have exposed the tradings stored there. From 21 October, customers reported trades they did not make.
据GMO称,攻击者随后索要赎金。他们威胁要通过日本国内外的70多家证券和外汇公司的账户继续下达未授权订单。他们还威胁要泄露客户和公司数据,并发动勒索软件攻击。
The attackers then demanded payment, according to GMO. They threatened to keep placing unauthorised orders through accounts at more than 70 securities and FX firms in Japan and abroad. They also threatened to leak customer and company data and to launch a ransomware attack.
GMO表示不会支付赎金,因为付款并不能保证被盗数据被删除,也无法阻止其被滥用。该公司已请求警方展开刑事调查。GMO还警告称,攻击者发布的任何内容可能都是部分虚假的。
GMO said it will not pay, because payment would not guarantee the stolen data is deleted or stop its misuse. It has asked police to open a criminal investigation. GMO also warned that anything the attackers publish may be partly false.
GMO还要求各大交易所和经纪商阻止来自该服务的访问并切断所有活跃会话。10月22日,OANDA日本公司通知客户,该服务上使用的MT4和MT5可能已遭泄露,并短暂暂停提现以进行安全检查。
GMO has also asked major exchanges and brokers to block access from the service and cut off all active sessions. On 22 October,OANDA Japan told customersthat MT4 and MT5s used on the service may have been exposed, and briefly held withdrawals for a security check.
据时事通信社报道,根据新法律,警察和日本自卫队可以在损害扩大之前侵入攻击者的服务器并将其瘫痪。然而,据Impress Watch报道,GMO并非该法律指定的关键基础设施运营商。
Under the new law, police and Japan’s Self-Defense Forces can break into attackers’ servers and disable them before damage spreads,Jiji Press reported. However, GMO is not among the critical infrastructure operators the law designates, according toImpress Watch.
与此同时,GMO将向该服务的每一位现有客户支付5000日元(约合32美元),无论他们是否蒙受资金损失。该公司还将承担未授权交易所产生的实际损失,并扣除经纪商的任何退款。
Meanwhile, GMO will pay ¥5,000 (about $32) to every current customer of the service, whether or not they lost money. It will also cover realised losses from unauthorised trades, minus any refunds from brokers.
该服务将不再恢复。客户可以免费转至独立的云服务六个月,GMO将在11月6日之前公布损失索赔流程的详情。该公司表示,目前尚无法估计对收益的影响。协调世界时上午10:11
The service will not return. Customers can move to a separate cloud service free for six months, and GMO will publish details of the loss claims process by 6 November. The company said it cannot yet estimate the cost to its earnings. 10:11 am UTC