9월 6일, 해킹그룹의 협박 메일을 받았다면?

9월 6일, 해킹그룹의 협박 메일을 받았다면?

최근 국내외 대형 기업들에게 다음과 같은 내용의 협박 이메일이 유포되었습니다. 

From: EXS <lmmytc@infovia.com.ar>

Date: 5 September 2016 7:15:16 am AEST

To: <xxxxxxxxxxxxxxxxxxxxx>

Subject: "EXS" Attack Invoice "EXS"

We are a HACKER TEAM - Armada Collective

1 - We have checked your information security systems, setup is poor; the systems are very vulnerable and obsolete.

2 - We'll begin attack on Tuesday 06-09-2016 8:00 p.m.!!!!! 

3 - We'll execute some targeted attacks and check your DDoS servers by the 10-300 Gbps attack power

4 - We'll run a security breach test of your servers through the determined vulnerability, and we'll gain the access to your databases.

5 - All the computers on your network will be attacked for Cerber - Crypto-Ransomware

6 - You can stop the attack beginning, if payment 1 bitcoin to bitcoin ADDRESS: 16fZWNeQ6rQLnYnfGHUciJaAUYowuAc4rh

7 - If you do not pay before the attack 1 bitcoin, the price will increase to 20 bitcoins

8 - You have time to decide! Transfer 1 bitcoin to ADDRESS: 16fZWNeQ6rQLnYnfGHUciJaAUYowuAc4rh

Bitcoins e-money https://en.wikipedia.org/wiki/Bitcoin

Bitcoins are very easy to use.

Instruction:

1.You have to make personal bitcoin wallet. It is very easy. You can download and install bitcoin wallet to your PC. 

There are lots of reliable wallets, such as: https://multibit.org/ https://xapo.com/

But there are much easier options as well. You can make bitcoin wallet online,

for example blockchain.info or coinbase.com and many others.

You may also transfer money directly from exchanger or bitcoin ATM to the decryption address provided to you.

2. You can top up the credit on your bitcoin wallet in most convenient way:

- To buy bitcoins in the nearest bitcoin ATM; refer to the address on a website: coinatmradar.com/countries/

- by means of credit card or different payment systems such as PayPal, Skrill, Neteller and others or by cash,

for example:

https://localbitcoins.com/buy_bitcoins

https://exchange.monetago.com

https://hitbtc.com/exchange

How to make bitcoin wallet with Google for the additional information

Armada Collective 해킹팀은 지금까지 DD4BC그룹의 다른 이름으로 인식되어 왔습니다. 이 해킹그룹은 2015년에 처음 세상에 알려졌습니다. DD4BC그룹은 일반적으로 대기업에 이메일을 발송하여 비트코인을 지급하라고 협박하며, 만약 비트코인을 지불하지 않으면 DDoS 공격을 감행한다고 위협합니다. Armada Collective 그룹은 실제로 협조하지 않는 기업에게 이메일에 언급되있는대로 DDoS 공격을 진행했으며, 그 규모는 최대 60Gbps였습니다.

하지만 Armada Collective 해킹팀이 유명해지자, 해당 그룹을 사칭하여 협박하는 그룹들이 나타났습니다. 올해 4월, Armada Collective 해킹팀을 사칭하는 그룹이 발견되었습니다. 해당 그룹이 검거되자, 그들이 실제 Armada Collective 해킹팀이 아닌 Armada Collective를 사칭하는 그룹이라는 것이 밝혀졌습니다. 

따라서 유비무환이라는 말처럼 기업들은 DDoS 공격에 잘 준비되어 있는지 확인하고, 서버 및 내부망의 취약점을 점검해보아야 하겠습니다.