全新 Maxtor 硬碟 被植木馬程式 個人資料 瞬間流向北京
自由時報 〔記者楊國文、何瑞玲／台北報導〕 2007/11/10
全新、國際知名大廠 Maxtor 品牌、大容量的可攜式硬碟，驚傳已被植入木馬程式病毒，一旦安裝使用，電腦中的資料就會幾乎不知不覺被竊取傳送到在中國北京的兩個網址。
泰國生產 在台出貨約兩千台
這批生產地寫著泰國的國際知名品牌Maxtor三點五吋、500G可攜式硬碟，在台灣出貨約有兩千台，在接獲調查局通知後，代理商及通路商都已全麵緊急下架，並將接受退貨回收，且已立即換成相近類型但不含病毒的產品上架。
這種全新產品即遭植入木馬程式事件，連電腦專家都表示聞所未聞，但卻真的發生在台灣。
調查局是在十月間接獲民眾報案，指新購的可攜式硬碟一安裝就疑已含有木馬程式，調查局獲報後相當重視，實地購買同款硬碟，送交調查局資安鑒識實驗室分析、測試，證實確有autorun.inf及ghost.pif（惡魔程式）兩種木馬程式。
可遠方竊密 疑中國網軍搞鬼
調查局電腦犯罪偵辦科發現，該兩個木馬程式會感染其他插入的隨身碟，並感染 autorun.inf、windows.scr 檔案，且會主動連線及上傳資料到 www‧nice8‧org 或 www‧we168‧org ，經查，登記該兩個網址公司都設在中國北京，動機顯不尋常。
調查局發現，使用者隻要安裝該硬碟，電腦程式就會自動連線上述特定網址，電腦資料變成「全都露」，可遠距方式輕易竊取電腦資料，研判應是中國網軍實施資訊戰，有計劃竊取我國政府敏感、國防機密及大企業商業機密。
軍情單位電腦中毒 後果嚴重
調查局認為，一般民眾很少購買容量如此大的硬碟，若政府機關、軍情單位官員電腦連接上此硬碟，國家機密可能會被秘密竊走，「那就嚴重了」；調查局資安人員也指出，不可輕忽的危機是，透過該可攜式硬碟的傳遞使用，病毒會形成「複式傳染」，不同電腦、硬碟都在不知情下被傳染，並遭中國監控、下載資料，目前遭感染電腦無法精確估計，倘若我政府機關、重要政黨人士的電腦被連鎖感染，後果更是不堪設想。
這件全新硬碟竟含木馬程式案件，是因今年十月初，有民眾向調查局報案指出，他到一家大賣場購買上述硬碟，但回家安裝後就發現可能被植入木馬程式，他認為，該硬碟是國際知名硬碟大廠製造，品質應該有保障才對，若被植入木馬程式病毒，「將很可怕」。
調查局人員查出，該硬碟製造地在泰國，是由台北縣建達國際公司於十月初代理進口，疑在泰國生產組裝、測試過程即被動手腳，植入木馬程式病毒，主要目標應是台灣，但不排除也有其他國家受害。
據了解，北縣調查站已查訪過建達國際，告知此事及嚴重性，要求全麵回收，並全力追查所有「有問題」的硬碟流向。
新聞來源：自由時報電子報
搜索更多相關主題的帖子: 新聞剪輯
[ News ] the Maxtor hard disk is instantaneous planted the Trojan horse computer program individual material instantaneous to flow to BeijingThe brand-new Maxtor hard disk is instantaneous planted the Trojan horse computer program individual material instantaneous to flow to Beijing The free Times [ Reporter the Yang Chinese, He Jui the Ling/Taibei reports ] 2007/11/10  Brand-new, the international well-known big plant Maxtor brand, large capacity may take along the type hard disk, the startled biography has been implanted the Trojan horse computer program virus, once installs the use, in the computer material can nearly unconsciously steal transmits to in Beijing, China's two websites. Thailand produces in produces goods approximately two thousand This batch of production writes Thailand's international well-known brand Maxtor 3.5 吋, 500G may take along the type hard disk, produces goods in Taiwan approximately has two thousand, after receives Investigation Bureau to inform, the business agent and the circuit business all already comprehensive urgent bottom carriage, and will accept the returned goods recycling, also changed into the close type but not to contain viral immediately the product top carriage. This kind of brand-new product namely suffers implants the Trojan horse computer program event, all indicates including the computer experts hears something never heard of before, but actually real occurrence in Taiwan. Investigation Bureau was receives the populace in October to report, refers newly buys may take along a type hard disk installment to doubt included the Trojan horse computer program, after Investigation Bureau attains the newspaper quite to take, really purchased the same funds hard disk, delivered Investigation Bureau capital An? to know the laboratory analysis, the test, confirmed really had autorun.inf and ghost.pif (devil formula) two kind of Trojan horse computer program. But the distant place steals secrets doubts the Chinese net armed force to do the ghost The Investigation Bureau computer-related crime detects manages the branch to discover that, this two Trojan horse computer program can infect other insertions along with the small dish, and infects autorun.inf, the windows.scr file, also can the driving segment and on passes on the material to www.nice8.org & www.we168.org , after looks up, registers this two websites company all to be located in the Beijing, China, the motive reveals not commonly. Investigation Bureau discovered, the user so long as installs this hard disk, the computer formula can the automatic segment above specific website, the computer material turn "all reveals", but the long-range way easily steals the computer material, After the research estimated should be the Chinese net armed force implements the information war, has the plan to steal our country government sensitive, the national defense secret and the big enterprise trade is secret. The military situation unit computer is poisoned the result to be serious Investigation Bureau believed that, the common populace very little purchase the capacity so big hard disk, if the governmental agency, the military situation unit official computer connects this hard disk, the national secret possibly can steal by the secret, "that has been serious"; The Investigation Bureau capital peaceful personnel also pointed out that, may not the careless and indiscreet crisis be, penetrates this may take along the type hard disk the transmission use, the virus can form "the duplicate infection" under, the different computer, the hard disk all in do not know the circumstances of the matter is infected, and suffers China to monitor, the downloading material, at present suffers infects the computer to be unable precisely to estimate, if my governmental agency, the important political party public figure's computer by the chain-like infection, the result is inconceivable. This brand-new hard disk unexpectedly contains the Trojan horse computer program case, is because this year at the beginning of October, some populace report to Investigation Bureau pointed out, greatly sells the field purchase above hard disk he to, after but goes home the installment possibly to implant on the discovery the Trojan horse computer program, he believed, this hard disk is the international well-known hard disk big plant manufacture, the quality should have the safeguard only then to, if is implanted the Trojan horse computer program virus, "very will be fearful". The Investigation Bureau personnel find out, this hard disk manufacture in Thailand, is constructs by the Taibei county reaches the multinational corporation to act in the beginning of October imports, doubts in Thailand produces the assembly, the test process namely passive hands and feet, implants the Trojan horse computer program virus, the essential target should be Taiwan, but does not remove also has other countries to suffer injury. It is reported, north the county investigation station investigated has constructed reaches internationally, informs this matter and the gravity, requests comprehensively to recycle, and traces all "has the question" the hard disk to flow to with all one's strength. News origin:Free Times electron newspaper The god love is:You since give birth to, hoodwinks me to guarantee hugs, since leaves the embryo, then hoodwinks me to cherish 搋. Is old until you, I was still this; Turns white until you, I still cherished 搋. I have been artificial, also must guarantee hugs; I must embrace, also must save.(Book of Isaiah 46:3-4) | |
 
|
