« Czech Republic COVID-19に関連して温度チェックについての声明を出していますね。。。 | Main | CNILがCOVID-19感染者をモニタリングする情報システムに関する政令案の審議結果を公表していますね。 »

2020.05.14

FBIとCISAが共同で、中国の攻撃者がCOVID-19のワクチン研究データを盗もうとしていると発表していますね。

こんにちは、丸山満彦です。

FBIとCISAが共同で、中国の攻撃者がCOVID-19のワクチン研究データを盗もうとしていると発表していますね。

 

Cybersecurity and Infrastructure Security Agency (CISA)

・2020.05.13 CISA-FBI Joint Announcement on PRC Targeting of COVID-19 Research Organizations

・2020.05.13 FBI AND CISA WARN AGAINST CHINESE TARGETING OF COVID-19 RESEARCH ORGANIZATIONS

・2020.05.13 [PDF] People’s Republic of China (PRC) Targeting of COVID-19 Research Organizations

推奨事項として(ざっくり)次のことを言っていますね。

  • COVID-19に関連する研究をしていると注目を浴び、サイバー活動が活発になると思って対処する。
  • インターネットに接続されたサーバやデータを処理するソフトウェアの既知の脆弱性に優先してパッチを当て、すべてのシステムに重大な脆弱性がないかを確認する。
  • ウェブアプリケーションを積極的にスキャンし、不正アクセス、不正変更等の異常な活動がないことを確認する。
  • 多要素認証を利用する。
  • 異常な活動を示すユーザを特定し、一時的にアクセスを停止する。

● Chinese Malicious Cyber Activity

 


 

報道等

The New York Times

2020.05.13 U.S. to Accuse China of Trying to Hack Vaccine Data, as Virus Redirects Cyberattacks by David E. Sanger and Nicole Perlroth

The Verge

2020.05.13 US government accuses Chinese ‘cyber actors’ of trying to steal COVID-19 vaccine research by Nick Statt

 

 

ーーーーー

People’s Republic of China (PRC) Targeting of COVID-19 Research Organizations

The Federal Bureau of Investigation (FBI) and Cybersecurity and Infrastructure Security Agency (CISA) are issuing this announcement to raise awareness of the threat to COVID-19-related research. The FBI is investigating the targeting and compromise of U.S. organizations conducting COVID-19-related research by PRC-affiliated cyber actors and non-traditional collectors. These actors have been observed attempting to identify and illicitly obtain valuable intellectual property (IP) and public health data related to vaccines, treatments, and testing from networks and personnel affiliated with COVID-19-related research. The potential theft of this information jeopardizes the delivery of secure, effective, and efficient treatment options. The FBI and CISA urge all organizations conducting research in these areas to maintain dedicated cybersecurity and insider threat practices to prevent surreptitious review or theft of COVID-19-related material. FBI is responsible for protecting the U.S. against foreign intelligence, espionage, and cyber operations, among other responsibilities. CISA is responsible for protecting the Nation’s critical infrastructure from physical and cyber threats. CISA is providing services and information to support the cybersecurity of federal and state/local/tribal/territorial entities, and private sector entities that play a critical role in COVID-19 research and response.

 

RECOMMENDATIONS

  • Assume that press attention affiliating your organization with COVID-19 related research will lead to increased interest and cyber activity.
  • Patch all systems for critical vulnerabilities, prioritizing timely patching for known vulnerabilities of internet-connected servers and software processing internet data.
  • Actively scan web applications for unauthorized access, modification, or anomalous activities.
  • Improve credential requirements and require multi-factor authentication.
  • Identify and suspend access of users exhibiting unusual activity.

 

VICTIM REPORTING AND ADDITIONAL INFORMATION

The FBI encourages victims to report information concerning suspicious or criminal activity to their local field office (www.fbi.gov/contact-us/field). For additional assistance and best practices, such as cyber hygiene vulnerability scanning, please visit https://www.cisa.gov/coronavirus.

 

|

« Czech Republic COVID-19に関連して温度チェックについての声明を出していますね。。。 | Main | CNILがCOVID-19感染者をモニタリングする情報システムに関する政令案の審議結果を公表していますね。 »

Comments

Post a comment



(Not displayed with comment.)




« Czech Republic COVID-19に関連して温度チェックについての声明を出していますね。。。 | Main | CNILがCOVID-19感染者をモニタリングする情報システムに関する政令案の審議結果を公表していますね。 »