(Bloomberg) - Hauv ib ntu uas qhia txog qhov tsis zoo ntawm lub ntiaj teb kev sib txuas hauv computer, cov neeg nyiag nkas tau txais kev nkag mus rau cov ntaub ntawv pov thawj hauv Asia siv los ntawm qee lub ntiaj teb cov lag luam loj tshaj plaws, muaj peev xwm bonanza rau kev soj ntsuam lossis kev puas tsuaj, raws li lub tuam txhab tshawb fawb cybersecurity. .
Feem ntau Nyeem los ntawm Bloomberg
Cov ntaub ntawv tsis tau tshaj tawm yav dhau los suav nrog email thiab password rau cov neeg siv khoom txhawb nqa lub vev xaib rau ob lub chaw ua haujlwm loj tshaj plaws hauv Asia: Shanghai-based GDS Holdings Ltd. thiab Singapore-based ST Telemedia Global Data Centers, raws li Resecurity Inc., uas muab cybersecurity cov kev pabcuam thiab tshawb xyuas cov neeg nyiag nkas. Txog 2,000 tus neeg siv khoom ntawm GDS thiab STT GDC tau cuam tshuam. Hackers tau nkag mus rau hauv cov nyiaj ntawm tsawg kawg tsib ntawm lawv, suav nrog Tuam Tshoj lub ntsiab kev sib pauv txawv teb chaws thiab cov nuj nqis lag luam thiab plaub lwm tus neeg los ntawm Is Nrias teb, raws li Kev Ruaj Ntseg, uas tau hais tias nws nkag mus rau pawg neeg nyiag khoom.
Nws tsis paub meej tias dab tsi - yog tias muaj dab tsi - cov hackers tau ua nrog rau lwm qhov kev nkag. Cov ntaub ntawv suav nrog cov ntawv pov thawj sib txawv rau qee lub tuam txhab loj tshaj plaws hauv ntiaj teb, suav nrog Alibaba Group Holding Ltd., Amazon.com Inc., Apple Inc., BMW AG, Goldman Sachs Group Inc., Huawei Technologies Co., Microsoft Corp., thiab Walmart Inc., raws li lub tuam txhab kev ruaj ntseg thiab ntau pua nplooj ntawv ntawm cov ntaub ntawv uas Bloomberg tau tshuaj xyuas.
Teb rau cov lus nug txog Resecurity qhov kev tshawb pom, GDS tau hais hauv nqe lus tias lub vev xaib txhawb nqa cov neeg siv khoom tau ua txhaum cai hauv 2021. Nws tsis paub meej tias cov neeg nyiag khoom tau txais STT GDC cov ntaub ntawv li cas. Lub tuam txhab ntawd hais tias nws tsis pom muaj pov thawj tias nws cov neeg siv khoom pabcuam portal raug cuam tshuam rau xyoo ntawd. Ob lub tuam txhab tau hais tias cov ntawv pov thawj tsis txaus ntseeg tsis ua rau muaj kev pheej hmoo rau cov neeg siv khoom IT systems lossis cov ntaub ntawv.
Txawm li cas los xij, Kev Ruaj Ntseg thiab cov thawj coj ntawm plaub lub tuam txhab loj hauv Teb Chaws Asmeskas uas tau cuam tshuam tau hais tias cov ntaub ntawv pov thawj raug nyiag tau sawv cev rau qhov tsis txaus ntseeg thiab muaj kev phom sij loj, feem ntau vim tias cov neeg siv khoom txhawb nqa lub vev xaib tswj tus neeg raug tso cai nkag mus rau lub cev IT cov cuab yeej nyob hauv cov ntaub ntawv chaw. Cov thawj coj, uas tau kawm txog qhov xwm txheej los ntawm Bloomberg Xov Xwm thiab tau lees paub cov ntaub ntawv nrog lawv pab pawg ruaj ntseg, uas tau thov kom tsis txhob raug txheeb xyuas vim lawv tsis tau tso cai los hais tawm rau pej xeem txog qhov teeb meem no.
Sau npe rau peb tsab ntawv xov xwm cybersecurity txhua lub lim tiam, Cyber Bulletin, ntawm no.
Qhov loj ntawm cov ntaub ntawv poob tau tshaj tawm los ntawm Resecurity qhia txog cov tuam txhab kev pheej hmoo loj zuj zus vim tias lawv muaj kev vam khom rau cov neeg thib peb rau cov ntaub ntawv hauv tsev thiab cov khoom siv IT thiab pab lawv cov tes hauj lwm mus txog kev lag luam thoob ntiaj teb. Cov kws paub txog kev ruaj ntseg hais tias qhov teeb meem tshwj xeeb yog mob hnyav hauv Suav teb, uas xav kom cov tuam txhab koom tes nrog cov chaw muab ntaub ntawv hauv zos.
"Qhov no yog npau suav phem tos kom tshwm sim," said Michael Henry, yav tas los tus thawj coj ntawm cov ntaub ntawv xov xwm ntawm Digital Realty Trust Inc., yog ib tus tswv lag luam loj tshaj plaws hauv Asmeskas cov chaw ua haujlwm, thaum hais txog qhov xwm txheej los ntawm Bloomberg. (Digital Realty Trust tsis cuam tshuam los ntawm qhov xwm txheej). Qhov xwm txheej phem tshaj plaws rau txhua tus neeg siv cov ntaub ntawv chaw yog tias cov neeg tawm tsam qee yam tau txais lub cev nkag mus rau cov neeg siv khoom cov servers thiab nruab qhov tsis zoo lossis cov cuab yeej siv ntxiv, Henry tau hais. "Yog tias lawv tuaj yeem ua tiav qhov ntawd, lawv tuaj yeem cuam tshuam kev sib txuas lus thiab kev lag luam ntawm qhov loj heev."
GDS thiab STT GDC tau hais tias lawv tsis muaj qhov qhia tau tias muaj dab tsi zoo li ntawd tshwm sim, thiab tias lawv cov kev pabcuam tseem ceeb tsis cuam tshuam.
Cov neeg nyiag nkag tau nkag mus rau cov ntawv pov thawj nkag rau ntau dua ib xyoos ua ntej tshaj tawm nws muag ntawm lub vev xaib tsaus ntuj lub hli tas los, rau $ 175,000, hais tias lawv tau dhau los ntawm qhov ntim ntawm nws, raws li Kev Ruaj Ntseg thiab lub screenshot ntawm kev tshaj tawm tshuaj xyuas los ntawm Bloomberg .
"Kuv siv qee lub hom phiaj," cov neeg nyiag nkas tau hais hauv kev tshaj tawm. "Tab sis tsis muaj peev xwm ua tau raws li tag nrho cov tuam txhab muaj ntau dua 2,000."
Cov email chaw nyob thiab passwords tuaj yeem tso cai rau cov neeg nyiag nkas tuaj yeem ua tus neeg siv tau tso cai ntawm cov neeg siv khoom siv lub vev xaib, raws li Kev Ruaj Ntseg. Lub tuam txhab kev ruaj ntseg tau tshawb pom cov ntaub ntawv khaws cia hauv lub Cuaj Hli 2021 thiab tau hais tias nws kuj pom cov pov thawj uas cov neeg nyiag nkas tau siv nws nkag mus rau cov nyiaj ntawm GDS thiab STT GDC cov neeg siv khoom tsis ntev los no thaum Lub Ib Hlis, thaum ob tus neeg ua haujlwm hauv chaw khaws ntaub ntawv yuam cov neeg siv khoom siv lo lus zais rov qab, raws li Kev Ruaj Ntseg.
Txawm hais tias tsis muaj tus password siv tau, cov ntaub ntawv tseem yuav muaj txiaj ntsig - tso cai rau cov neeg nyiag nkas los tsim cov phiaj xwm phishing email tawm tsam cov neeg uas muaj qib siab nkag mus rau lawv cov tuam txhab cov tes hauj lwm, raws li Resecurity.
Feem ntau ntawm cov tuam txhab cuam tshuam uas Bloomberg Xov Xwm hu rau, suav nrog Alibaba, Amazon, Huawei thiab Walmart, tsis kam tawm tswv yim. Apple tsis teb rau cov lus nrhiav kev tawm tswv yim.
Hauv tsab ntawv tshaj tawm, Microsoft tau hais tias, "Peb niaj hnub saib xyuas cov kev hem thawj uas tuaj yeem cuam tshuam rau Microsoft thiab thaum muaj kev hem thawj raug txheeb xyuas peb ua qhov tsim nyog los tiv thaiv Microsoft thiab peb cov neeg siv khoom." Tus cev lus rau Goldman Sachs tau hais tias, "Peb muaj kev tswj hwm ntxiv los tiv thaiv hom kev ua txhaum cai no thiab peb txaus siab tias peb cov ntaub ntawv tsis muaj kev pheej hmoo."
Tus kws tsim tsheb BMW tau hais tias nws paub txog qhov teeb meem no. Tab sis ib tus neeg hais xov xwm hauv tuam txhab tau hais tias, "Tom qab kev ntsuam xyuas, qhov teeb meem muaj feem cuam tshuam rau BMW cov lag luam thiab tsis muaj kev puas tsuaj rau BMW cov neeg siv khoom thiab cov ntaub ntawv ntsig txog cov khoom." Tus cev lus tau hais ntxiv, "BMW tau hais kom GDS txhim kho cov ntaub ntawv kev nyab xeeb qib."
GDS thiab STT GDC yog ob lub chaw muab kev pabcuam loj tshaj plaws hauv Asia. Lawv ua raws li cov tswv tsev, xauj qhov chaw hauv lawv cov chaw khaws ntaub ntawv rau cov neeg siv khoom nruab thiab tswj lawv tus kheej cov cuab yeej IT nyob ntawd, feem ntau yuav nyob ze rau cov neeg siv khoom thiab kev lag luam hauv Asia. GDS yog ib qho ntawm peb qhov chaw muab kev pabcuam loj tshaj plaws hauv Suav teb, yog lub khw thib ob loj tshaj plaws rau kev pabcuam hauv ntiaj teb tomqab Asmeskas, raws li Synergy Research Group Inc. Singapore nyob rau qib thib rau.
Cov tuam txhab lag luam kuj tseem muaj kev cuam tshuam: cov ntaub ntawv koom nrog qhia tau hais tias xyoo 2014, Singapore Technologies Telemedia Pte, leej txiv ntawm STT GDC, tau txais 40% feem pua ntawm GDS.
Tus Thawj Saib Xyuas Kev Ruaj Ntseg Gene Yoo tau hais tias nws lub tuam txhab tau tshaj tawm cov xwm txheej hauv 2021 tom qab ib tus neeg ua haujlwm tau nkag mus rau hauv pawg neeg nyiag khoom hauv Suav teb uas tau tawm tsam tsoomfwv lub hom phiaj hauv Taiwan.
Tsis ntev tom qab ntawd, nws tau ceeb toom GDS thiab STT GDC thiab qee tus neeg siv kev nyab xeeb me me uas tau cuam tshuam, raws li Yoo thiab cov ntaub ntawv.
Kev nyab xeeb ceeb toom rau GDS thiab STT GDC dua thaum Lub Ib Hlis tom qab pom cov neeg nyiag nkag nkag mus rau hauv cov nyiaj, thiab lub tuam txhab kev ruaj ntseg kuj tau ceeb toom cov tub ceev xwm hauv Suav teb thiab Singapore thaum lub sijhawm ntawd, raws li Yoo thiab cov ntaub ntawv.
Ob tus neeg khiav dej num hauv chaw zov me nyuam tau hais tias lawv teb tam sim ntawd thaum ceeb toom txog cov teeb meem kev nyab xeeb thiab pib tshawb xyuas sab hauv.
Cheryl Lee, tus cev lus rau Cyber Security Agency ntawm Singapore, tau hais tias lub chaw haujlwm "tau paub txog qhov xwm txheej thiab tab tom pab ST Telemedia txog qhov teeb meem no." National Computer Network Emergency Response Technical Team/Coordination Center ntawm Tuam Tshoj, ib lub koom haum tsis yog tsoomfwv uas tswj xyuas cyber thaum muaj xwm txheej ceev, tsis teb rau cov lus nrhiav kev tawm tswv yim.
GDS tau lees paub tias lub vev xaib txhawb nqa cov neeg siv khoom tau ua txhaum cai thiab hais tias nws tau tshawb xyuas thiab kho qhov tsis zoo hauv lub vev xaib xyoo 2021.
"Daim ntawv thov uas tau tsom los ntawm hackers yog txwv nyob rau hauv cov peev txheej thiab cov ntaub ntawv rau cov haujlwm tsis tseem ceeb, xws li ua daim pib thov, teem caij xa khoom ntawm lub cev thiab tshuaj xyuas cov ntaub ntawv saib xyuas," raws li lub tuam txhab tshaj tawm. "Kev thov ua los ntawm daim ntawv thov feem ntau xav tau offline ua raws thiab lees paub. Muab qhov tseem ceeb ntawm daim ntawv thov, kev ua txhaum cai tsis ua rau muaj kev hem thawj rau peb cov neeg siv khoom IT kev ua haujlwm. "
STT GDC tau hais tias nws tau coj cov kws tshaj lij cybersecurity sab nraud thaum nws paub txog qhov xwm txheej hauv 2021. "Cov txheej txheem IT hauv nqe lus nug yog ib qho kev pabcuam rau cov neeg siv khoom siv daim pib" thiab "tsis muaj kev cuam tshuam rau lwm lub koom haum lossis cov ntaub ntawv tseem ceeb," lub tuam txhab tau hais. .
Lub tuam txhab tau hais tias nws qhov chaw pabcuam cov neeg siv khoom tsis raug ua txhaum cai hauv 2021 thiab tias cov ntaub ntawv pov thawj tau txais los ntawm Kev Ruaj Ntseg yog "ib feem thiab cov npe ntawm cov neeg siv cov ntaub ntawv pov thawj rau peb cov neeg siv khoom daim ntawv thov. Cov ntaub ntawv no tam sim no tsis raug thiab tsis ua rau muaj kev pheej hmoo nyab xeeb mus tom ntej. "
"Tsis muaj kev nkag mus tsis raug cai lossis cov ntaub ntawv poob," raws li STT GDC cov lus.
Txawm hais tias cov hackers yuav siv cov ntaub ntawv li cas, cov kws tshaj lij cybersecurity tau hais tias cov tub sab nyiag tau qhia tias cov neeg tawm tsam tab tom tshawb nrhiav txoj hauv kev tshiab los nkag mus rau lub hom phiaj nyuaj.
Malcolm Harkins, yav tas los tus thawj tswj hwm kev ruaj ntseg thiab kev ceev ntiag tug ntawm Intel Corp tau hais tias kev ruaj ntseg lub cev ntawm cov khoom siv IT hauv cov chaw thib peb thiab cov kab ke tswj kev nkag mus rau nws sawv cev rau qhov tsis zoo uas feem ntau saib xyuas los ntawm cov tuam txhab kev ruaj ntseg, hais tias Malcolm Harkins, tus thawj coj kev ruaj ntseg thiab kev ceev ntiag tug ntawm Intel Corp. Cov cuab yeej siv "yuav muaj qhov tshwm sim loj heev," Harkins tau hais.
Cov hackers tau txais email chaw nyob thiab password rau ntau dua 3,000 tus neeg ntawm GDS - suav nrog nws tus kheej cov neeg ua haujlwm thiab cov neeg siv khoom - thiab ntau dua 1,000 los ntawm STT GDC, raws li cov ntaub ntawv tshuaj xyuas los ntawm Bloomberg News.
Cov hackers tseem nyiag cov ntaub ntawv pov thawj rau GDS lub network ntawm ntau dua 30,000 lub koob yees duab soj ntsuam, feem ntau ntawm cov uas tso siab rau cov passwords yooj yim xws li "admin" lossis "admin12345," cov ntaub ntawv qhia. GDS tsis tau hais ib lo lus nug txog qhov raug liam tias tub sab ntawm daim ntawv pov thawj rau lub koob yees duab network, lossis hais txog cov passwords.
Tus naj npawb ntawm cov ntawv pov thawj nkag rau cov neeg siv khoom txhawb nqa lub vev xaib sib txawv rau cov neeg siv khoom sib txawv. Piv txwv li, muaj 201 nyiaj ntawm Alibaba, 99 ntawm Amazon, 32 ntawm Microsoft, 16 ntawm Baidu Inc., 15 ntawm Bank of America Corp., xya ntawm Bank of China Ltd., plaub ntawm Apple thiab peb ntawm Goldman, raws li cov ntaub ntawv. Resecurity's Yoo tau hais tias cov hackers tsuas yog xav tau ib qho email chaw nyob thiab tus password siv tau los nkag mus rau lub tuam txhab tus account ntawm cov neeg siv khoom siv portal.
Ntawm lwm lub tuam txhab uas nws cov neeg ua haujlwm nkag tau cov ntsiab lus tau txais, raws li Kev Ruaj Ntseg thiab cov ntaub ntawv, yog: Bharti Airtel Ltd. hauv Is Nrias teb, Bloomberg LP (tus tswv ntawm Bloomberg News), ByteDance Ltd., Ford Motor Co., Globe Telecom Inc. . hauv Philippines, Mastercard Inc., Morgan Stanley, Paypal Holdings Inc., Porsche AG, SoftBank Corp., Telstra Group Ltd. hauv Australia, Tencent Holdings Ltd., Verizon Communications Inc. thiab Wells Fargo & Co.
Hauv tsab ntawv tshaj tawm, Baidu tau hais tias, "Peb tsis ntseeg tias cov ntaub ntawv twg raug cuam tshuam. Baidu ua tib zoo saib xyuas cov ntaub ntawv kev nyab xeeb ntawm peb cov neeg siv khoom. Peb yuav ua tib zoo saib xyuas cov teeb meem zoo li no thiab tseem ceeb toom rau txhua qhov kev hem thawj tshwm sim rau cov ntaub ntawv kev nyab xeeb hauv ib feem ntawm peb txoj haujlwm. "
Tus neeg sawv cev rau Porsche tau hais tias, "Hauv qhov tshwj xeeb no peb tsis muaj qhov qhia tau tias muaj kev pheej hmoo." Ib tug neeg sawv cev ntawm SoftBank tau hais tias ib lub tuam txhab hauv Suav teb tau tso tseg tsis siv GDS xyoo tas los. "Tsis muaj cov ntaub ntawv cov neeg siv khoom xau los ntawm lub tuam txhab Tuam Tshoj hauv zos tau lees paub, thiab tsis muaj kev cuam tshuam rau nws txoj kev lag luam thiab kev pabcuam," tus neeg sawv cev tau hais.
Tus cev lus ntawm Telstra tau hais tias, "Peb tsis paub txog kev cuam tshuam rau kev lag luam tom qab qhov kev ua txhaum cai no," thaum tus neeg sawv cev Mastercard tau hais tias, "Thaum peb tseem saib xyuas qhov xwm txheej no, peb tsis paub txog kev pheej hmoo rau peb txoj kev lag luam lossis cuam tshuam rau. peb cov kev lag luam network lossis cov tshuab. "
Ib tus neeg sawv cev rau Tencent tau hais tias, "Peb tsis paub txog kev cuam tshuam rau kev lag luam tom qab qhov kev ua txhaum cai no. Peb tswj hwm peb cov servers hauv cov chaw khaws ntaub ntawv ncaj qha, nrog rau cov neeg ua haujlwm hauv chaw zov me nyuam tsis muaj kev nkag mus rau cov ntaub ntawv khaws cia ntawm Tencent servers. Peb tsis tau pom ib qho kev nkag mus tsis tau tso cai ntawm peb cov IT systems thiab servers tom qab kev tshawb nrhiav, uas tseem muaj kev nyab xeeb thiab nyab xeeb. "
Ib tus kws tshaj lij rau Wells Fargo tau hais tias nws siv GDS rau thaub qab IT infrastructure kom txog rau thaum Lub Kaum Ob Hlis 2022. "GDS tsis tau nkag mus rau Wells Fargo cov ntaub ntawv, tshuab, lossis Wells Fargo network," lub tuam txhab tau hais. Lwm lub tuam txhab tsis kam tawm tswv yim lossis tsis teb.
Resecurity's Yoo tau hais tias thaum Lub Ib Hlis, nws lub tuam txhab ua haujlwm undercover nias cov neeg nyiag nkas rau kev ua qauv qhia seb lawv puas tseem nkag mus rau cov nyiaj. Cov neeg nyiag nkag tau muab cov duab thaij duab qhia lawv nkag mus rau hauv cov nyiaj rau tsib lub tuam txhab thiab taug kev mus rau lwm nplooj ntawv hauv GDS thiab STT GDC online portals, nws hais. Kev ruaj ntseg tso cai rau Bloomberg Xov Xwm los tshuaj xyuas cov screenshots no.
Ntawm GDS, cov neeg nyiag nkas nkag mus rau ib tus account rau Tuam Tshoj Txawv Teb Chaws Kev Lag Luam Kev Lag Luam, ib sab caj npab ntawm Tuam Tshoj lub tuam txhab nyiaj hauv nruab nrab uas ua lub luag haujlwm tseem ceeb hauv lub teb chaws kev lag luam, ua haujlwm rau tsoomfwv cov nyiaj pauv txawv teb chaws thiab cov nuj nqis lag luam, raws li cov screenshots thiab Kev Nyab Xeeb. Lub koom haum tsis teb cov lus.
Ntawm STT GDC, cov neeg nyiag nkas tau nkag mus rau cov nyiaj rau National Internet Exchange ntawm Is Nrias teb, ib lub koom haum uas txuas cov chaw muab kev pabcuam hauv internet thoob plaws lub tebchaws, thiab peb lwm tus nyob hauv Is Nrias teb: MyLink Services Pvt., Skymax Broadband Services Pvt., thiab Logix InfoSecurity Pvt., cov screenshots qhia.
Mus txog los ntawm Bloomberg, National Internet Exchange ntawm Is Nrias teb tau hais tias nws tsis paub txog qhov xwm txheej thiab tsis lees paub ntxiv. Tsis muaj lwm lub koom haum hauv Is Nrias teb teb rau kev thov tawm tswv yim.
Nug txog qhov kev thov tias hackers tseem nkag mus rau cov nyiaj hauv Lub Ib Hlis siv cov ntaub ntawv pov thawj raug nyiag, tus neeg sawv cev GDS tau hais tias, "Tsis ntev los no, peb tau pom ntau qhov kev tawm tsam tshiab los ntawm cov neeg nyiag nkas siv cov ntaub ntawv qub nkag mus rau tus account. Peb tau siv ntau yam cuab yeej cuab tam los thaiv cov kev tawm tsam no. Txog tam sim no, peb tsis tau pom muaj kev ua tiav tshiab los ntawm cov neeg nyiag nkas uas yog vim peb lub cev tsis muaj zog. "
Tus neeg sawv cev GDS tau hais ntxiv tias, "Raws li peb tau paub, ib tus neeg siv khoom tsis tau rov pib dua ib qho ntawm lawv tus lej password rau daim ntawv thov no uas yog tus qub neeg ua haujlwm ntawm lawv. Qhov ntawd yog vim li cas peb nyuam qhuav yuam kom rov pib dua tus password rau txhua tus neeg siv. Peb ntseeg tias qhov no yog ib qho kev tshwm sim cais. Nws tsis yog qhov tshwm sim los ntawm cov neeg nyiag nkas nyiag los ntawm peb qhov kev ruaj ntseg. "
STT GDC tau hais tias nws tau txais kev ceeb toom thaum Lub Ib Hlis ntawm kev hem thawj ntxiv rau cov neeg siv khoom siv portals hauv "peb thaj tsam Is Nrias teb thiab Thaib teb." "Peb qhov kev tshawb fawb txog niaj hnub no qhia tau hais tias tsis muaj cov ntaub ntawv poob lossis cuam tshuam rau ib qho ntawm cov kev pabcuam cov neeg siv khoom no," lub tuam txhab tau hais.
Thaum lub Ib Hlis lig, tom qab GDS thiab STT GDC hloov cov neeg siv khoom 'passwords, Kev nyab xeeb pom cov hackers tshaj tawm cov ntaub ntawv muag rau ntawm lub vev xaib tsaus nti, ua lus Askiv thiab Suav, raws li Yoo.
"DBs muaj cov ntaub ntawv ntawm cov neeg siv khoom, tuaj yeem siv rau phishing, nkag mus rau hauv cov txee, saib xyuas kev txiav txim thiab khoom siv, kev txiav txim ntawm cov chaw taws teeb," tus ncej tau hais. "Leej twg tuaj yeem pab nrog lub hom phiaj phishing?"
Feem ntau Nyeem los ntawm Bloomberg Businessweek
© 2023 Bloomberg LP
Tau qhov twg los: https://finance.yahoo.com/news/hackers-scored-data-center-logins-020028440.html