Regarding the situation in Ukraine, the Ministry of Economy, Trade and Industry called on domestic companies to strengthen measures on the 23rd, saying that the potential risk of cyber attacks is increasing, but security experts are not limited to companies. , We are calling attention to be prepared for the possibility of cyber attacks even at home.
According to the security company "Internet Initiative", "Honeypot" about "DDoS attack" that the Ukrainian Ministry of Defense and banks are said to have received a large amount of data in mid-February and the homepage etc. are forced to stop functioning As a result of observation using a decoy device called ", it was confirmed that a large amount of data was exchanged with a server in Ukraine for two days on February 15th and 16th, which had hardly been done before. ..
The data was exchanged on the server of a private bank in Ukraine, and it is believed that the attacker conducted a DDoS attack by hiding the decoy device in order to prevent the attacker from getting stuck.
Kiyotaka Domae, a senior engineer at the Internet Initiative Japan, said, "A large amount of data has been sent to a specific target, and it seems that someone is intentionally launching a camouflage attack." Cyber attacks have become more active during conflicts between countries. Although it may be unlikely that Japanese companies will be attacked directly, there are increasing cases of cyber attacks taking advantage of the turmoil, and Japan is involved. It is possible that it will be done. "
In recent years, DDoS attacks often include attacks by infecting so-called "IoT devices" such as home appliances connected to the Internet with viruses and using them as "stepping stones" in addition to personal computers. So, Mr. Domae said, "IoT devices are easy for attackers to target, and it is possible that attacks will be carried out from hijacked home devices via the company's system. Now that remote work is progressing, employees I would like you to review your security measures, such as keeping the software up-to-date even at home. "
What is a "DDoS attack"?
A "DDoS attack" is one of the cyber attacks that puts a heavy load on the websites and servers of companies and organizations by continuously sending a large amount of data and drives them to stop functioning.
In addition to simple harassment, DDoS attacks are carried out for the purpose of intimidating by demanding money in exchange for stopping the attack, and the damage is endless all over the world.
Regarding the situation in Ukraine, Ukrainian officials said this month that the defense ministry and banks were hit by a DDoS attack, which hindered operations, and a senior U.S. government official said, "I think Russia is involved." increase.
In Japan, the information on the attacker's side is unknown, but this month, the server in Hiroshima Prefecture was targeted by the attack, and the homepages of the prefecture and all municipalities in the prefecture are still intermittently difficult to browse. There have been cases where the organizing committee system was attacked during the Rugby World Cup three years ago.