SECURITIES FIRMS BLACKMAILED FOR 10 BITCOINS, FIRST SEEN IN TAIWNA|首宗券商遭駭客恐嚇 要求匯10元比特幣

Over 10 securities firms became the target of anonymous online hackers, the first such case in Taiwan's history. The firms received threats on February 1st, followed by attacks on their online transaction systems. The blackmailers also demanded that the firms each pay 10 bitcoins, approximately $320 thousand NTD, or face another attack that will paralyze their trading. The Criminal Investigation Bureau is investigating the case. Several securities firms in Taiwan discovered threatening e-mails written in English as they tested their transaction systems after returning from the holiday. The e-mails claimed that a 15-minute attack on the transaction system would follow and demanded payment of 10 bitcoins, or about NT$320,000. A further attack on February 7 was threatened if the firms did not pay. Some firms discovered abnormal web traffic on the 1st, indicating an attack. ==CHIU SHAO-CHOU Captain, 9th Investigation Corp., CIB== They sent emails saying that, if they did not receive a bitcoin payment in their designated account before a certain deadline, they would initiate a DDOS (Distributed Denial of Service) attack. ==CHANG CHEN-SHAN Dep. Dir.-Gen., Securities and Futures Bureau, FSC== (The firms) reported that (the hackers) didn't breach the system, just disrupted its operations. They overloaded the system past its bandwidth capacity. The attacked firms immediately notified the Financial Supervisory Commission, and the Criminal Investigation Bureau opened an investigation. The attacks are now attributed to a well-known international hacker group. The attackers have been traced to a Romanian IP, and local police have been contacted to assist with the investigation. ==CHEN CHIEH-CHANG Captain, 2nd Brigade, 9th Investigation Corp., CIB== The hackers used a large number of "zombie" computers, possibly over 10,000, to connect to the server targeted by their attack. This led to the targeted server being paralyzed. The FSC has required financial institutions to increase their bandwidth in response to this mass attack, and required them to step up information security measures to protect client and investor rights. TRANSLATED BY：JOHN CHEN 台灣多家券商的電子下單系統，在2月1號開工前進行測試時，都收到一封英文恐嚇郵件，對方聲稱會發動15分鐘攻擊，還勒索10元比特幣，大約32萬台幣，如果不付款，將在2月7日再度發動攻擊。結果2月1號當天、部分券商發現，部分網路流量確實異常。 ==刑事局偵九大隊隊長 邱紹洲== 他們是寄送電子郵件 然後信件中說明 如果不在一定時間內 支付比特幣 到特定指定帳戶裡面 他們將在指定期限 發動DDoS(分散式阻斷服務)攻擊 ==金管會證期局副局長張振山== (券商)他們有跟我們通報 (駭客)沒有進來只有阻斷 就是被灌爆掉 讓你頻寬 根本沒辦法容納那麼多 把你塞爆掉 券商在第一時間通報金管會，刑事局也介入調查，查出歹徒是國際知名電腦駭客集團，用常見的DDoS分散式阻斷服務攻擊手法，癱瘓券商的伺服器，而且攻擊的IP伺服器遠在羅馬尼亞，已交由國際科聯繫當地警方協查。 ==刑事局偵九大隊二隊隊長 陳詰昌== 駭客他利用了 很多很多的僵屍網路 可能有上萬台的僵屍網路 對某一個攻擊目標 做一個連線的動作 導致這個被攻擊的伺服器 它造成一個癱瘓的一個狀況 針對這起大規模駭客攻擊，金管會除了要求金融機構加寬頻寬因應外，也已經要求金融業者加強5大資訊安全防護措施，以確保客戶及投資人權益。 記者 吳雅瑜 林國煌 台北報導