
GMO互联网集团于周三宣布,该公司已确认一个被网络攻击者用来泄露数据的网站已被关闭。这些数据据称是通过该公司的域名注册服务Onamae.com在一场可能影响超过2.6万台公司服务器的数据泄露事件中被窃取的。
GMO Internet Group announced Wednesday that it had confirmed the shutdown of a website used by cyberattackers to leak data allegedly stolen in a breach potentially affecting more than 26,000 of the company’s servers via its domain registration service Onamae.com.
GMO与一个匿名黑客集团之间的对峙于周二白热化,当时该黑客集团在其网站上公布了据称属于一名GMO客户的个人信息。该个人资料包括诸如该个人的照片、姓名和地址等身份识别细节,以及有关其网络活动的信息,包括其购物习惯以及使用的金融机构和服务。
The standoff between GMO and an anonymous hacker group came to a head on Tuesday when the hacker group published personal information purportedly belonging to a GMO client on its website. The profile included identifying details such as the individual’s photograph, name and address, as well as information about their online activity, including their shopping habits and the financial institutions and services they use.
攻击者曾索要100万美元的赎金,作为不发布泄露信息的交换条件。在GMO拒绝支付后,该黑客集团在其网站上发布了该名据称是GMO客户的信息,并威胁称在支付赎金之前,每天将公布另一名用户的隐私信息。
The attackers had demanded a $1 million ransom in exchange for not publishing the leaked information. After GMO refused to pay, the hacker group published the purported GMO client’s information on its website and threatened to publish another user’s private information each day until the ransom is paid.
作为回应,GMO宣布悬赏最高100万美元征集能协助逮捕该黑客集团的信息,并于周三推出一个网站以收集线索。该网站称,公司正在寻找关于参与攻击的人员、他们使用的基础设施(包括连接的服务器和IP地址)、资金流向以及指向犯罪分子作案手法的证据的信息。
In response, GMO announced a bounty of up to $1 million for information leading to the hacker group’s arrest and launched a website on Wednesday to collect leads. The website says the company is seeking information on those involved in the attack, the infrastructure they used, including connected servers and IP addresses, the movement of funds, and evidence pointing to the criminals’ methodology.
GMO在周三发布的一份新闻稿中警告称,尽管攻击者的原始域已被关闭,但可能会出现新的网站。
In a news release released on Wednesday, GMO warned that new websites could emerge even though the attackers’ original domain had been shut down.
GMO表示:“如果原始网站或任何新网站出现,我们将对涉及发布、复制或传播这些网站上公布的信息的特别恶意的行为作出坚决回应。这可能包括采取法律行动,例如提起刑事诉讼。”
“Should the original website or any new websites emerge, we will respond firmly to particularly malicious acts involving the posting, reproduction, or dissemination of information published on those sites. This may include legal action such as filing criminal complaints,” GMO said.
GMO表示:“特别是,将人们引导至攻击者的网站是一种严重的行为,可能被解读为怂恿攻击者并协助其活动。”上周末,GMO要求日本政府对攻击者采取主动网络防御措施。出于对透露调查现状的安全担忧,并指出是否中和攻击者基础设施的决定取决于相关部门,日本政府拒绝就针对GMO案的具体应对措施发表评论。
“In particular, directing people to the attackers’ website is a serious act that could be interpreted as encouraging the attackers and assisting their activities.”Over the weekend, GMO asked the Japanese government to take active cyberdefense measures against the attackers. The government has declined to comment on any specific response to the GMO case, citing security concerns in revealing the status of investigations and noting that decisions on whether to neutralize attackers’ infrastructure rest with the relevant authorities.
据新闻报道,警视厅目前正采取保护措施,以确保受数据泄露影响的GMO客户的安全。
According to news reports, the Metropolitan Police Department is currently taking protective measures to ensure the safety of those of GMO’s clients affected by the data breach.