Slashdot Mirror
Japan's Largest Defense Contractor Hacked
wiredmikey writes "Mitsubishi Heavy Industries Ltd, Japan's largest defense contractor, has been a victim of a cyber attack, according to a report from the company. The company said attackers had gained access to company computer systems, with some reports saying the attacks targeted its submarine, missile and nuclear power plant component businesses. According to The Yomiuri newspaper, approximately 80 systems had been infected with malware at the company's headquarters in Tokyo, as well as manufacturing and research and development sites, including Kobe Shipyard & Machinery Works, Nagasaki Shipyard & Machinery Works and Nagoya Guidance & Propulsion System Works. 'We can't rule out small possibilities of further information leakage but so far crucial data about our products or technologies have been kept safe,' a Mitsubishi Heavy spokesman told Reuters. 'We've found out that some system information such as IP addresses have been leaked and that's creepy enough,' the spokesman added."
that must explains it.
Letting hackers half way into your system especially when you're dealing with state sponsored hacking groups or corporate espionage is not a horrible idea so long as you make it work for you.
After all even though they're in your systems you have have an opportunity to log them in a way that you don't if they're just scrapping on the outside. Build a multi-tiered defense and let them get all the information that you don't actually care about. For example... promotional information and publicly released data. You can also have dummy files thrown around with garbage data filled in rather then the real specs. Have fun with it. But the really secret stuff... consider not having that on the network at all. If you're talking about top secret information... maybe that calls for an armed courier.
I've decided to stop wasting my time responding to AC trolls/sockpuppets... so if you want a response from me... login.
I was hoping someone had gotten out technical documents of bipedal weapons platforms, or powered armor, or SOMETHING. :(
Friend: "The NIC is misconfigured..." Me: "No prob, I'll just telnet in and fix it." *Silence*
Let's just hope for the sake of earth that the Godzilla-doomsday weapon files have not been leaked....
Holy crap, it's the Cylons! Someone make sure our Battlestars aren't networked together!
Chinese defense contractors announced today that they have made a series of tremendous advancements in submarine, missile, and nuclear power plant component technology.
SJW: Someone who has run out of real oppression, and has to fake it.
looks like a job for Section 9
How many times does this have to happen before these businesses realize they should not be on the internet... period. You're either inside the building, or your not logged in. It's that simple.
I'm just picturing Godzilla, sitting at a computer in a basement somewhere...
For your security, this post has been encrypted with ROT-13, twice.
It is Tamaribuchi Heavy Manufacturing Concern who merged with Matsumura Fishworks a while back. They're the ones who make Mr. Sparkle.
We will bankrupt ourselves in the vain search for absolute security. -- Dwight D. Eisenhower
'We've found out that some system information such as IP addresses have been leaked and that's creepy enough,' the spokesman added."
Er, what?
nslookup www.mhi.co.jp
Server: UnKnown
Address: 10.0.1.1
Non-authoritative answer:
Name: www.mhi.co.jp
Address: 202.228.55.2
I must be missing something. I'm sure a little digging would turn up their production network FQDN if it's Internet facing (which it apparently is).
"Tongue tied and twisted, just an Earth bound misfit
Maps of network internals can turn up routable unsecured devices like printers, APs with old firmware, that forgotten server in that closet etc. that can be used to harvest login credentials or exploit the network further if the devices are trusted.
OMG!!! you published your DNS ip address!!!
Indeed. I am sure that the world knowing that 10.0.1.1 will enable hackers worldwide to infiltrate his network.
Maps of network internals can turn up routable unsecured devices like printers, APs with old firmware, that forgotten server in that closet etc. that can be used to harvest login credentials or exploit the network further if the devices are trusted.
True. My old workplace networking division was searching for where the internal infection of Conflicker was coming from.
I re-told them about the wonder of nmap ("Huh? What's that?" @_@) that I had mentioned briefly (and was obviously ignored and forgotten) and discovered the worm was coming from one of their internal web servers located in the same physical room as their office. And these were our network security guys who sold security systems. *sigh*
I find it hard to believe a spokesperson for a Japanese corporation used the word 'creepy', but hey; wire services are never wrong.
I'm enraged! Why did they have to mention that the Mitsubishi spokesman is heavy? don't you think the poor man is reminded of his weight problems often enough? really bad reporting. I'm tired of this weightism! heavy people have feelings too
They probably hired their good friends, Sony Computer, to do the auditing for them...
how long until
How many wake-up calls like this do organizations the world over need before they start doing computer security right?
Just had to get that off my chest.
Please correct me if I got my facts wrong.
I cannot believe this. Who would be so stupid. They will obviously counter attack just to save face, and counter attack they will, in force. The execs might not know what is clearly going on, but someone in operations is going to spend a lot of time and money on getting revenge. I am glad that its not me on the receiving end. Mitsubishi Heavy Industries? I guarantee they they are out for blood this time.
I worked for one of the Mitsubishi manufacturing companies in the US and this isn't a surprise. Security was never a focus. They acted like we were completely secure, yet any number of systems were in the proxy-bypass group. Add to that lackluster policies on updating AV and workstation security patches. Bet it sucks for my former co-workers today.
...the laughing man