Reported on December 26. The CNN website published a report on December 18 titled "The Hacking Incidents That Put Us at Risk in 2017", which took stock of some major events that occurred in 2017. Hacking Incident:
Equifax Leak Incident
In July this year, cybercriminals penetrated into Equifax, one of the largest credit reporting companies in the United States, and stole The personal information of 145 million people was stolen. The case is considered one of the worst hacks ever because so much sensitive information was exposed, including citizens' Social Security numbers.
Equifax did not disclose the matter until two months later. The fallout from the case is feared to be felt for years because the stolen data could be used to commit identity theft crimes.
After the Equifax leak case, people began to worry about the security of the large amount of consumer information data held by intermediaries. From company records to email addresses to dates of birth, intermediaries hold a variety of personal information.
Companies like Equifax will sell information to customers such as banks, landlords, and employers. People who buy the information will know you better.
Yahoo incident
Yahoo’s parent company Verizon announced in August this year that all 3 billion Yahoo accounts around the world had been hacked as early as 2013 - the scale of the damage was Three times the original estimate.
Former Yahoo CEO Marissa Meyer told the U.S. Congress in November that Yahoo did not discover the intrusion until 2016, when it claimed that 1 billion accounts were affected.
So far, Yahoo still doesn't know who is the culprit.
Leaks of government tools
In April this year, an anonymous group called the "Shadow Brokers" released a batch of hacking tools, which are believed to come from the US National Security Agency .
Hackers can use these tools to invade a variety of Windows servers and operating systems, including Windows 7 and Windows 8 systems.
Microsoft Corporation of the United States stated that it released patches for related security vulnerabilities as early as March this year, but many companies did not update them in time. Subsequently, tools released by the "Shadow Brokers" were used to cause many major international hacking incidents, such as the "WannaCry" ransomware incident.
"WannaCry" ransomware
"WannaCry" ransomware used some tools leaked from the US National Security Agency and spread to more than 150 countries. WannaCry targeted companies using outdated Windows software in May, locking their computer systems.
The hackers behind WannaCry demanded that these companies pay a ransom to unlock their files. More than 300,000 machines were affected, and countless industries including medical and automotive were not spared.
And this matter has affected human lives: a British hospital was forced to temporarily close because its computers were locked. A patient told reporters that his cancer surgery could only be postponed.
"Notpetiya" virus
In June this year, the "Notpetiya" computer virus targeted Ukrainian companies that used poisoned financial and taxation software. Many large multinational companies have been affected, including the US FedEx Corporation, the British advertising agency WPP, Rosneft and Denmark's Maersk Line.
The propagation method of "Notpetia" also exploits the security vulnerabilities leaked by the "Shadow Brokers".
Federal Express stated in September that the virus had caused losses of US$300 million, and its TNT International Express Company was forced to suspend operations.
Bad Rabbit Ransomware
Another ransomware causing a lot of commotion is Bad Rabbit. "Bad Rabbit" used pop-up Adobe Flash software installation requests from news media websites to penetrate users' computers, and those news media websites have been hacked.
This extortion wave occurred in October and mainly affected Russia, but experts found that victims also appeared in Ukraine, Turkey and Germany.
This incident reminds us that users must not download software through advertising pop-ups or websites that do not belong to the software company.
Voter information leaked
In June this year, computer security researchers discovered that an American Republican Party data company made an error when selecting the security settings of Amazon’s cloud storage service. , causing the information of nearly 200 million voters to be leaked.
This is the latest major leak caused by insufficient security of Amazon servers. The default options for servers are secure, but network security engineer Chris Vickery often finds companies setting them up incorrectly.
The U.S. telecommunications company Verizon and the U.S. Department of Defense also had information stored on Amazon servers exposed.
Uber concealed the hacking case
In 2016, a hacker stole the data of 57 million Uber users, and the American company Uber subsequently paid $100,000 to settle the matter. It was not until November this year that the case was disclosed by new Uber CEO Dara Khosrowshahi. Uber is now facing questions from lawmakers. Three U.S. senators are pushing for legislation that could lead to jail time for executives who deliberately cover up data breaches.
Reports indicate that there will be more such incidents in 2018. Nonnhoven, vice president of Trend Micro in the United States, believes that attacks on the Internet of Things will continue to affect industries such as civil aviation, manufacturing, and automobiles, as these industries increasingly rely on so-called smart technologies.
“These industries face the same cybersecurity challenges that our laptops and phones face, but they are tied to real objects in the real world. If someone hacks my laptop, I "But if someone hacks into an automatic robotic arm, the entire production line will be at risk."
The report said that various intrusions this year may ultimately change consumers. behavior. It turns out that social security numbers and birthdays may not be the best way to securely identify yourself. Criminals buy and sell these numbers at low prices, and personal information such as addresses, emails, and passwords are also bought and sold.