{"id":477119,"date":"2023-08-09T09:07:44","date_gmt":"2023-08-09T09:07:44","guid":{"rendered":""},"modified":"2023-09-05T11:14:03","modified_gmt":"2023-09-05T11:14:03","slug":"eternalblue","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/jp\/wiki\/eternalblue\/","title":{"rendered":"\u30a8\u30bf\u30fc\u30ca\u30eb\u30d6\u30eb\u30fc"},"content":{"rendered":"<p>EternalBlue \u306f\u30012017 \u5e74 5 \u6708\u306b\u767a\u751f\u3057\u305f\u58ca\u6ec5\u7684\u306a WannaCry \u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\u653b\u6483\u3067\u4f7f\u7528\u3055\u308c\u305f\u3053\u3068\u3067\u60aa\u540d\u3092\u99b3\u305b\u305f\u60aa\u540d\u9ad8\u3044\u30b5\u30a4\u30d0\u30fc\u5175\u5668\u3067\u3059\u3002\u7c73\u56fd\u56fd\u5bb6\u5b89\u5168\u4fdd\u969c\u5c40 (NSA) \u304c\u958b\u767a\u3057\u305f EternalBlue \u306f\u3001Microsoft \u306e Windows \u30aa\u30da\u30ec\u30fc\u30c6\u30a3\u30f3\u30b0 \u30b7\u30b9\u30c6\u30e0\u306e\u8106\u5f31\u6027\u3092\u72d9\u3046\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u3067\u3059\u3002\u3053\u306e\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u306f\u3001\u30b5\u30fc\u30d0\u30fc \u30e1\u30c3\u30bb\u30fc\u30b8 \u30d6\u30ed\u30c3\u30af (SMB) \u30d7\u30ed\u30c8\u30b3\u30eb\u306e\u6b20\u9665\u3092\u60aa\u7528\u3057\u3001\u653b\u6483\u8005\u304c\u30e6\u30fc\u30b6\u30fc\u306e\u4ecb\u5165\u306a\u3057\u306b\u30ea\u30e2\u30fc\u30c8\u3067\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u308b\u3088\u3046\u306b\u3059\u308b\u305f\u3081\u3001\u30b5\u30a4\u30d0\u30fc\u72af\u7f6a\u8005\u306e\u624b\u306b\u6e21\u308c\u3070\u975e\u5e38\u306b\u5371\u967a\u306a\u30c4\u30fc\u30eb\u3068\u306a\u308a\u307e\u3059\u3002<\/p>\n<h2>\u30a8\u30bf\u30fc\u30ca\u30eb\u30d6\u30eb\u30fc\u306e\u8d77\u6e90\u3068\u305d\u306e\u6700\u521d\u306e\u8a00\u53ca\u306e\u6b74\u53f2<\/h2>\n<p>EternalBlue \u306e\u8d77\u6e90\u306f\u3001NSA \u306e Tailored Access Operations (TAO) \u30e6\u30cb\u30c3\u30c8\u306b\u307e\u3067\u9061\u308a\u307e\u3059\u3002TAO \u306f\u3001\u60c5\u5831\u53ce\u96c6\u3068\u30b9\u30d1\u30a4\u6d3b\u52d5\u306e\u76ee\u7684\u3067\u9ad8\u5ea6\u306a\u30b5\u30a4\u30d0\u30fc\u5175\u5668\u306e\u958b\u767a\u3068\u914d\u5099\u3092\u62c5\u5f53\u3057\u3066\u3044\u307e\u3059\u3002\u5f53\u521d\u306f\u3001NSA \u304c\u6a19\u7684\u306e\u30b7\u30b9\u30c6\u30e0\u306b\u4fb5\u5165\u3057\u3066\u76e3\u8996\u3059\u308b\u305f\u3081\u306b\u4f7f\u7528\u3059\u308b\u653b\u6483\u30c4\u30fc\u30eb\u306e\u4e00\u90e8\u3068\u3057\u3066\u4f5c\u6210\u3055\u308c\u307e\u3057\u305f\u3002<\/p>\n<p>\u885d\u6483\u7684\u306a\u5c55\u958b\u3068\u306a\u3063\u305f\u306e\u306f\u30012016 \u5e74 8 \u6708\u306b Shadow Brokers \u3068\u547c\u3070\u308c\u308b\u30b0\u30eb\u30fc\u30d7\u304c NSA \u306e\u30cf\u30c3\u30ad\u30f3\u30b0 \u30c4\u30fc\u30eb\u306e\u5927\u90e8\u5206\u3092\u6f0f\u6d29\u3057\u305f\u3053\u3068\u3067\u3059\u3002\u6f0f\u6d29\u3057\u305f\u30a2\u30fc\u30ab\u30a4\u30d6\u306b\u306f\u3001EternalBlue \u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u306e\u307b\u304b\u3001\u4fb5\u5165\u3055\u308c\u305f\u30b7\u30b9\u30c6\u30e0\u3078\u306e\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u3092\u53ef\u80fd\u306b\u3059\u308b DoublePulsar \u306a\u3069\u306e\u5f37\u529b\u306a\u30c4\u30fc\u30eb\u304c\u542b\u307e\u308c\u3066\u3044\u307e\u3057\u305f\u3002\u3053\u308c\u304c EternalBlue \u304c\u521d\u3081\u3066\u516c\u306b\u8a00\u53ca\u3055\u308c\u305f\u3053\u3068\u3068\u306a\u308a\u3001\u30b5\u30a4\u30d0\u30fc\u72af\u7f6a\u8005\u3084\u56fd\u5bb6\u652f\u63f4\u3092\u53d7\u3051\u305f\u653b\u6483\u8005\u306b\u3088\u308b EternalBlue \u306e\u5e83\u7bc4\u56f2\u306b\u308f\u305f\u308b\u60aa\u610f\u3042\u308b\u4f7f\u7528\u306e\u304d\u3063\u304b\u3051\u3068\u306a\u308a\u307e\u3057\u305f\u3002<\/p>\n<h2>EternalBlue\u306e\u8a73\u7d30\u60c5\u5831: \u30c8\u30d4\u30c3\u30af\u306e\u62e1\u5927<\/h2>\n<p>EternalBlue \u306f\u3001Windows \u30aa\u30da\u30ec\u30fc\u30c6\u30a3\u30f3\u30b0 \u30b7\u30b9\u30c6\u30e0\u3067\u4f7f\u7528\u3055\u308c\u308b SMBv1 \u30d7\u30ed\u30c8\u30b3\u30eb\u306e\u8106\u5f31\u6027\u3092\u5229\u7528\u3057\u307e\u3059\u3002SMB \u30d7\u30ed\u30c8\u30b3\u30eb\u306f\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306b\u63a5\u7d9a\u3055\u308c\u305f\u30b3\u30f3\u30d4\u30e5\u30fc\u30bf\u30fc\u9593\u3067\u30d5\u30a1\u30a4\u30eb\u3068\u30d7\u30ea\u30f3\u30bf\u30fc\u306e\u5171\u6709\u3092\u53ef\u80fd\u306b\u3059\u308b\u3082\u306e\u3067\u3001EternalBlue \u304c\u60aa\u7528\u3059\u308b\u7279\u5b9a\u306e\u8106\u5f31\u6027\u306f\u3001SMB \u304c\u7279\u5b9a\u306e\u30d1\u30b1\u30c3\u30c8\u3092\u51e6\u7406\u3059\u308b\u65b9\u6cd5\u306b\u5b58\u5728\u3057\u307e\u3059\u3002<\/p>\n<p>EternalBlue \u306e\u60aa\u7528\u306b\u6210\u529f\u3059\u308b\u3068\u3001\u653b\u6483\u8005\u306f\u8106\u5f31\u306a\u30b7\u30b9\u30c6\u30e0\u4e0a\u3067\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3057\u3001\u30de\u30eb\u30a6\u30a7\u30a2\u3092\u57cb\u3081\u8fbc\u3093\u3060\u308a\u3001\u30c7\u30fc\u30bf\u3092\u76d7\u3093\u3060\u308a\u3001\u3055\u3089\u306a\u308b\u653b\u6483\u306e\u8db3\u639b\u304b\u308a\u3092\u4f5c\u3063\u305f\u308a\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002EternalBlue \u304c\u3053\u308c\u307b\u3069\u307e\u3067\u306b\u7834\u58ca\u7684\u306a\u88ab\u5bb3\u3092\u53ca\u307c\u3057\u3066\u3044\u308b\u7406\u7531\u306e 1 \u3064\u306f\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5168\u4f53\u306b\u6025\u901f\u306b\u5e83\u304c\u308a\u3001\u30ef\u30fc\u30e0\u306e\u3088\u3046\u306a\u8105\u5a01\u306b\u5909\u308f\u308b\u80fd\u529b\u3067\u3059\u3002<\/p>\n<h2>EternalBlue\u306e\u5185\u90e8\u69cb\u9020\uff1a\u4ed5\u7d44\u307f<\/h2>\n<p>EternalBlue \u306e\u6280\u8853\u7684\u306a\u4ed5\u7d44\u307f\u306f\u8907\u96d1\u3067\u3001\u8907\u6570\u306e\u6bb5\u968e\u306e\u60aa\u7528\u3092\u4f34\u3044\u307e\u3059\u3002\u653b\u6483\u306f\u3001\u7279\u5225\u306b\u7d30\u5de5\u3055\u308c\u305f\u30d1\u30b1\u30c3\u30c8\u3092\u30bf\u30fc\u30b2\u30c3\u30c8 \u30b7\u30b9\u30c6\u30e0\u306e SMBv1 \u30b5\u30fc\u30d0\u30fc\u306b\u9001\u4fe1\u3059\u308b\u3053\u3068\u304b\u3089\u59cb\u307e\u308a\u307e\u3059\u3002\u3053\u306e\u30d1\u30b1\u30c3\u30c8\u306f\u8106\u5f31\u306a\u30b7\u30b9\u30c6\u30e0\u306e\u30ab\u30fc\u30cd\u30eb \u30d7\u30fc\u30eb\u3092\u30aa\u30fc\u30d0\u30fc\u30d5\u30ed\u30fc\u3055\u305b\u3001\u30ab\u30fc\u30cd\u30eb\u306e\u30b3\u30f3\u30c6\u30ad\u30b9\u30c8\u3067\u653b\u6483\u8005\u306e\u30b7\u30a7\u30eb\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3057\u307e\u3059\u3002\u3053\u308c\u306b\u3088\u308a\u3001\u653b\u6483\u8005\u306f\u4fb5\u5bb3\u3055\u308c\u305f\u30b7\u30b9\u30c6\u30e0\u3092\u5236\u5fa1\u3057\u3066\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3067\u304d\u307e\u3059\u3002<\/p>\n<p>EternalBlue \u306f\u3001\u30d0\u30c3\u30af\u30c9\u30a2 \u30a4\u30f3\u30d7\u30e9\u30f3\u30c8\u3068\u3057\u3066\u6a5f\u80fd\u3059\u308b DoublePulsar \u3068\u547c\u3070\u308c\u308b\u8ffd\u52a0\u30b3\u30f3\u30dd\u30fc\u30cd\u30f3\u30c8\u3092\u6d3b\u7528\u3057\u307e\u3059\u3002\u30bf\u30fc\u30b2\u30c3\u30c8\u304c EternalBlue \u306b\u611f\u67d3\u3059\u308b\u3068\u3001DoublePulsar \u304c\u5c55\u958b\u3055\u308c\u3001\u6301\u7d9a\u6027\u304c\u7dad\u6301\u3055\u308c\u3001\u5c06\u6765\u306e\u653b\u6483\u3078\u306e\u7d4c\u8def\u304c\u63d0\u4f9b\u3055\u308c\u307e\u3059\u3002<\/p>\n<h2>EternalBlue\u306e\u4e3b\u306a\u6a5f\u80fd\u306e\u5206\u6790<\/h2>\n<p>EternalBlue \u3092\u5f37\u529b\u306a\u30b5\u30a4\u30d0\u30fc\u5175\u5668\u306b\u3057\u3066\u3044\u308b\u4e3b\u306a\u7279\u5fb4\u306f\u6b21\u306e\u3068\u304a\u308a\u3067\u3059\u3002<\/p>\n<ol>\n<li>\n<p><strong>\u30ea\u30e2\u30fc\u30c8\u30b3\u30fc\u30c9\u5b9f\u884c<\/strong>EternalBlue \u306b\u3088\u308a\u3001\u653b\u6483\u8005\u306f\u8106\u5f31\u306a\u30b7\u30b9\u30c6\u30e0\u4e0a\u3067\u30b3\u30fc\u30c9\u3092\u30ea\u30e2\u30fc\u30c8\u3067\u5b9f\u884c\u3057\u3001\u5b8c\u5168\u306a\u5236\u5fa1\u304c\u53ef\u80fd\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30ef\u30fc\u30e0\u306e\u3088\u3046\u306a\u5897\u6b96<\/strong>: \u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u5168\u4f53\u306b\u81ea\u5f8b\u7684\u306b\u62e1\u6563\u3059\u308b\u80fd\u529b\u306b\u3088\u308a\u3001\u30ef\u30fc\u30e0\u306f\u5371\u967a\u306a\u3082\u306e\u3068\u306a\u308a\u3001\u6025\u901f\u306a\u611f\u67d3\u3092\u4fc3\u9032\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30b9\u30c6\u30eb\u30b9\u6027\u3068\u57f7\u62d7\u3055<\/strong>DoublePulsar \u306e\u30d0\u30c3\u30af\u30c9\u30a2\u6a5f\u80fd\u306b\u3088\u308a\u3001\u653b\u6483\u8005\u306f\u4fb5\u5bb3\u3055\u308c\u305f\u30b7\u30b9\u30c6\u30e0\u306b\u9577\u671f\u9593\u5b58\u5728\u3057\u7d9a\u3051\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>Windows \u3092\u30bf\u30fc\u30b2\u30c3\u30c8\u306b\u3059\u308b<\/strong>EternalBlue \u306f\u4e3b\u306b Windows \u30aa\u30da\u30ec\u30fc\u30c6\u30a3\u30f3\u30b0 \u30b7\u30b9\u30c6\u30e0\u3001\u5177\u4f53\u7684\u306b\u306f\u8106\u5f31\u6027\u3092\u4fee\u6b63\u3057\u305f\u30d1\u30c3\u30c1\u3088\u308a\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3092\u30bf\u30fc\u30b2\u30c3\u30c8\u306b\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u30a8\u30bf\u30fc\u30ca\u30eb\u30d6\u30eb\u30fc\u306e\u7a2e\u985e\u304c\u5b58\u5728\u3059\u308b<\/h2>\n<table>\n<thead>\n<tr>\n<th>\u540d\u524d<\/th>\n<th>\u8aac\u660e<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u30a8\u30bf\u30fc\u30ca\u30eb\u30d6\u30eb\u30fc<\/td>\n<td>Shadow Brokers \u306b\u3088\u3063\u3066\u6f0f\u6d29\u3055\u308c\u305f\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u306e\u30aa\u30ea\u30b8\u30ca\u30eb \u30d0\u30fc\u30b8\u30e7\u30f3\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u6c38\u9060\u306e\u30ed\u30de\u30f3\u30b9<\/td>\n<td>EternalBlue \u3068\u540c\u6642\u306b\u6f0f\u6d29\u3057\u305f\u3001SMBv1 \u3092\u30bf\u30fc\u30b2\u30c3\u30c8\u3068\u3057\u305f\u95a2\u9023\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u30a8\u30bf\u30fc\u30ca\u30eb\u30b7\u30ca\u30b8\u30fc<\/td>\n<td>Shadow Brokers \u306b\u3088\u3063\u3066\u6f0f\u6d29\u3055\u308c\u305f\u5225\u306e SMBv1 \u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u6c38\u9060\u306e\u30c1\u30e3\u30f3\u30d4\u30aa\u30f3<\/td>\n<td>SMBv2 \u30ea\u30e2\u30fc\u30c8 \u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u306b\u4f7f\u7528\u3055\u308c\u308b\u30c4\u30fc\u30eb\u3002\u6f0f\u6d29\u3057\u305f NSA \u30c4\u30fc\u30eb\u306e\u4e00\u90e8\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u30a8\u30bf\u30fc\u30ca\u30eb\u30d6\u30eb\u30fc\u30d0\u30c3\u30c1<\/td>\n<td>EternalBlue \u306e\u30c7\u30d7\u30ed\u30a4\u30e1\u30f3\u30c8\u3092\u81ea\u52d5\u5316\u3059\u308b\u30d0\u30c3\u30c1 \u30b9\u30af\u30ea\u30d7\u30c8\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>EternalBlue \u306e\u4f7f\u3044\u65b9\u3001\u554f\u984c\u70b9\u3001\u89e3\u6c7a\u7b56<\/h2>\n<p>EternalBlue \u306f\u4e3b\u306b\u60aa\u610f\u306e\u3042\u308b\u76ee\u7684\u3067\u4f7f\u7528\u3055\u308c\u3001\u5e83\u7bc4\u56f2\u306b\u308f\u305f\u308b\u30b5\u30a4\u30d0\u30fc\u653b\u6483\u3084\u30c7\u30fc\u30bf\u4fb5\u5bb3\u3092\u5f15\u304d\u8d77\u3053\u3057\u3066\u3044\u307e\u3059\u3002\u305d\u306e\u4f7f\u7528\u65b9\u6cd5\u306b\u306f\u6b21\u306e\u3088\u3046\u306a\u3082\u306e\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<ol>\n<li>\n<p><strong>\u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\u653b\u6483<\/strong>EternalBlue \u306f WannaCry \u304a\u3088\u3073 NotPetya \u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\u653b\u6483\u3067\u4e2d\u5fc3\u7684\u306a\u5f79\u5272\u3092\u679c\u305f\u3057\u3001\u83ab\u5927\u306a\u7d4c\u6e08\u7684\u640d\u5931\u3092\u5f15\u304d\u8d77\u3053\u3057\u307e\u3057\u305f\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30dc\u30c3\u30c8\u30cd\u30c3\u30c8\u306e\u62e1\u6563<\/strong>\u3053\u306e\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u306f\u3001\u8106\u5f31\u306a\u30b7\u30b9\u30c6\u30e0\u3092\u30dc\u30c3\u30c8\u30cd\u30c3\u30c8\u306b\u7d44\u307f\u8fbc\u3080\u305f\u3081\u306b\u5229\u7528\u3055\u308c\u3001\u3088\u308a\u5927\u898f\u6a21\u306a\u653b\u6483\u3092\u53ef\u80fd\u306b\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u30c7\u30fc\u30bf\u306e\u76d7\u96e3<\/strong>: EternalBlue \u306f\u30c7\u30fc\u30bf\u306e\u6d41\u51fa\u3092\u5bb9\u6613\u306b\u3057\u3001\u6a5f\u5bc6\u60c5\u5831\u306e\u6f0f\u6d29\u306b\u3064\u306a\u304c\u3063\u3066\u3044\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n<p>EternalBlue \u304c\u3082\u305f\u3089\u3059\u30ea\u30b9\u30af\u3092\u8efd\u6e1b\u3059\u308b\u306b\u306f\u3001\u6700\u65b0\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30d1\u30c3\u30c1\u3092\u9069\u7528\u3057\u3066\u30b7\u30b9\u30c6\u30e0\u3092\u6700\u65b0\u306e\u72b6\u614b\u306b\u4fdd\u3064\u3053\u3068\u304c\u4e0d\u53ef\u6b20\u3067\u3059\u3002Microsoft \u306f\u3001Shadow Brokers \u306e\u6f0f\u6d29\u3092\u53d7\u3051\u3066\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3 \u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3067 SMBv1 \u306e\u8106\u5f31\u6027\u306b\u5bfe\u51e6\u3057\u307e\u3057\u305f\u3002SMBv1 \u3092\u5b8c\u5168\u306b\u7121\u52b9\u306b\u3057\u3066\u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30bb\u30b0\u30e1\u30f3\u30c6\u30fc\u30b7\u30e7\u30f3\u3092\u4f7f\u7528\u3059\u308b\u3053\u3068\u3082\u3001\u3053\u306e\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u3078\u306e\u9732\u51fa\u3092\u6e1b\u3089\u3059\u306e\u306b\u5f79\u7acb\u3061\u307e\u3059\u3002<\/p>\n<h2>\u4e3b\u306a\u7279\u5fb4\u3068\u985e\u4f3c\u7528\u8a9e\u3068\u306e\u6bd4\u8f03<\/h2>\n<p>EternalBlue \u306f\u4ed6\u306e\u6ce8\u76ee\u3059\u3079\u304d\u30b5\u30a4\u30d0\u30fc\u653b\u6483\u3068\u985e\u4f3c\u70b9\u304c\u3042\u308a\u307e\u3059\u304c\u3001\u305d\u306e\u898f\u6a21\u3068\u5f71\u97ff\u306e\u70b9\u3067\u969b\u7acb\u3063\u3066\u3044\u307e\u3059\u3002<\/p>\n<table>\n<thead>\n<tr>\n<th>\u60aa\u7528\u3059\u308b<\/th>\n<th>\u8aac\u660e<\/th>\n<th>\u30a4\u30f3\u30d1\u30af\u30c8<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\u30a8\u30bf\u30fc\u30ca\u30eb\u30d6\u30eb\u30fc<\/td>\n<td>\u5927\u898f\u6a21\u306a\u30b5\u30a4\u30d0\u30fc\u653b\u6483\u306b\u4f7f\u7528\u3055\u308c\u308b Windows \u30b7\u30b9\u30c6\u30e0\u306e SMBv1 \u3092\u30bf\u30fc\u30b2\u30c3\u30c8\u306b\u3057\u307e\u3059\u3002<\/td>\n<td>\u4e16\u754c\u7684\u306a\u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\u306e\u767a\u751f\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u30cf\u30fc\u30c8\u30d6\u30ea\u30fc\u30c9<\/td>\n<td>OpenSSL \u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3001Web \u30b5\u30fc\u30d0\u30fc\u3092\u5371\u967a\u306b\u3055\u3089\u3057\u307e\u3059\u3002<\/td>\n<td>\u30c7\u30fc\u30bf\u306e\u6f0f\u6d29\u3084\u76d7\u96e3\u306e\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u7832\u5f3e\u30b7\u30e7\u30c3\u30af<\/td>\n<td>Unix \u30b7\u30a7\u30eb\u306e Bash \u3092\u30bf\u30fc\u30b2\u30c3\u30c8\u306b\u3057\u3066\u3001\u4e0d\u6b63\u30a2\u30af\u30bb\u30b9\u3092\u8a31\u53ef\u3057\u307e\u3059\u3002<\/td>\n<td>\u30b7\u30b9\u30c6\u30e0\u3078\u306e\u4fb5\u5165\u3068\u5236\u5fa1\u3002<\/td>\n<\/tr>\n<tr>\n<td>\u30b9\u30bf\u30c3\u30af\u30b9\u30cd\u30c3\u30c8<\/td>\n<td>SCADA \u30b7\u30b9\u30c6\u30e0\u3092\u6a19\u7684\u3068\u3059\u308b\u9ad8\u5ea6\u306a\u30ef\u30fc\u30e0\u3002<\/td>\n<td>\u91cd\u8981\u306a\u30b7\u30b9\u30c6\u30e0\u306e\u6df7\u4e71\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u30a8\u30bf\u30fc\u30ca\u30eb\u30d6\u30eb\u30fc\u306b\u95a2\u9023\u3059\u308b\u5c06\u6765\u306e\u5c55\u671b\u3068\u6280\u8853<\/h2>\n<p>EternalBlue \u306e\u51fa\u73fe\u3068\u305d\u306e\u58ca\u6ec5\u7684\u306a\u5f71\u97ff\u306b\u3088\u308a\u3001\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3068\u8106\u5f31\u6027\u7ba1\u7406\u306e\u91cd\u8981\u6027\u304c\u9ad8\u307e\u3063\u3066\u3044\u307e\u3059\u3002\u4eca\u5f8c\u540c\u69d8\u306e\u4e8b\u4ef6\u3092\u9632\u3050\u305f\u3081\u306b\u3001\u4ee5\u4e0b\u306e\u70b9\u306b\u91cd\u70b9\u304c\u7f6e\u304b\u308c\u308b\u3088\u3046\u306b\u306a\u3063\u3066\u3044\u307e\u3059\u3002<\/p>\n<ol>\n<li>\n<p><strong>\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u7ba1\u7406<\/strong>: EternalBlue \u306e\u3088\u3046\u306b\u60aa\u7528\u3055\u308c\u308b\u53ef\u80fd\u6027\u306e\u3042\u308b\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u3092\u691c\u51fa\u3057\u3001\u8efd\u6e1b\u3059\u308b\u305f\u3081\u306e\u5f37\u529b\u306a\u6226\u7565\u3092\u958b\u767a\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u9ad8\u5ea6\u306a\u8105\u5a01\u691c\u51fa<\/strong>: \u30b5\u30a4\u30d0\u30fc\u8105\u5a01\u3092\u52b9\u679c\u7684\u306b\u7279\u5b9a\u3057\u3001\u5bfe\u5fdc\u3059\u308b\u305f\u3081\u306b\u3001AI \u99c6\u52d5\u578b\u8105\u5a01\u691c\u51fa\u30b7\u30b9\u30c6\u30e0\u306a\u3069\u306e\u4e88\u9632\u5bfe\u7b56\u3092\u5b9f\u65bd\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u5171\u540c\u9632\u885b<\/strong>: \u653f\u5e9c\u3001\u7d44\u7e54\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u7814\u7a76\u8005\u9593\u306e\u56fd\u969b\u5354\u529b\u3092\u4fc3\u9032\u3057\u3001\u30b5\u30a4\u30d0\u30fc\u8105\u5a01\u306b\u5171\u540c\u3067\u5bfe\u51e6\u3057\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u30d7\u30ed\u30ad\u30b7\u30b5\u30fc\u30d0\u30fc\u306e\u4f7f\u7528\u65b9\u6cd5\u3084EternalBlue\u3068\u306e\u95a2\u9023\u4ed8\u3051\u65b9\u6cd5<\/h2>\n<p>\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306f\u3001EternalBlue \u306b\u95a2\u3057\u3066\u9632\u5fa1\u3068\u653b\u6483\u306e\u4e21\u65b9\u306e\u5f79\u5272\u3092\u679c\u305f\u3059\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n<ol>\n<li>\n<p><strong>\u9632\u5fa1\u7684\u306a\u4f7f\u7528<\/strong>: \u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306f\u3001\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u3068\u30b5\u30fc\u30d0\u30fc\u306e\u9593\u306e\u4ef2\u4ecb\u5f79\u3068\u3057\u3066\u6a5f\u80fd\u3057\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af \u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092\u30d5\u30a3\u30eb\u30bf\u30ea\u30f3\u30b0\u304a\u3088\u3073\u691c\u67fb\u3059\u308b\u3053\u3068\u3067\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3092\u5f37\u5316\u3057\u307e\u3059\u3002\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306f\u3001EternalBlue \u306b\u95a2\u9023\u3059\u308b\u7591\u308f\u3057\u3044\u30a2\u30af\u30c6\u30a3\u30d3\u30c6\u30a3\u3092\u691c\u51fa\u3057\u3066\u30d6\u30ed\u30c3\u30af\u3057\u3001\u6f5c\u5728\u7684\u306a\u653b\u6483\u3092\u8efd\u6e1b\u3059\u308b\u306e\u306b\u5f79\u7acb\u3061\u307e\u3059\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u653b\u6483\u7684\u306a\u4f7f\u7528<\/strong>: \u6b8b\u5ff5\u306a\u304c\u3089\u3001\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u306f\u3001\u653b\u6483\u8005\u304c\u81ea\u5206\u306e\u75d5\u8de1\u3092\u96e3\u8aad\u5316\u3057\u305f\u308a\u3001\u60aa\u610f\u306e\u3042\u308b\u6d3b\u52d5\u306e\u8d77\u6e90\u3092\u96a0\u3057\u305f\u308a\u3059\u308b\u305f\u3081\u306b\u60aa\u7528\u3055\u308c\u308b\u3053\u3068\u3082\u3042\u308a\u307e\u3059\u3002\u3053\u308c\u306b\u306f\u3001\u30d7\u30ed\u30ad\u30b7 \u30b5\u30fc\u30d0\u30fc\u3092\u4f7f\u7528\u3057\u3066\u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u306e\u30c8\u30e9\u30d5\u30a3\u30c3\u30af\u3092\u4e2d\u7d99\u3057\u3001\u653b\u6483\u3092\u958b\u59cb\u3057\u306a\u304c\u3089\u533f\u540d\u6027\u3092\u7dad\u6301\u3059\u308b\u3053\u3068\u304c\u542b\u307e\u308c\u307e\u3059\u3002<\/p>\n<\/li>\n<\/ol>\n<h2>\u95a2\u9023\u30ea\u30f3\u30af<\/h2>\n<p>EternalBlue\u3001\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u3001\u304a\u3088\u3073\u95a2\u9023\u30c8\u30d4\u30c3\u30af\u306e\u8a73\u7d30\u306b\u3064\u3044\u3066\u306f\u3001\u6b21\u306e\u30ea\u30bd\u30fc\u30b9\u3092\u53c2\u7167\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<ol>\n<li><a href=\"https:\/\/docs.microsoft.com\/en-us\/security-updates\/securitybulletins\/2017\/ms17-010\" target=\"_new\" rel=\"noopener nofollow\">\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8 \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u60c5\u5831 MS17-010<\/a><\/li>\n<li><a href=\"https:\/\/en.wikipedia.org\/wiki\/The_Shadow_Brokers\" target=\"_new\" rel=\"noopener nofollow\">\u30b7\u30e3\u30c9\u30fc\u30d6\u30ed\u30fc\u30ab\u30fc\u306e\u30ea\u30fc\u30af<\/a><\/li>\n<li><a href=\"https:\/\/en.wikipedia.org\/wiki\/WannaCry_ransomware_attack\" target=\"_new\" rel=\"noopener nofollow\">WannaCry \u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\u653b\u6483<\/a><\/li>\n<li><a href=\"https:\/\/www.fireeye.com\/blog\/threat-research\/2017\/05\/smb-exploited-wannacry-use-of-eternalblue.html\" target=\"_new\" rel=\"noopener nofollow\">EternalBlue: SMBv1 \u30a8\u30af\u30b9\u30d7\u30ed\u30a4\u30c8\u3092\u7406\u89e3\u3059\u308b<\/a><\/li>\n<\/ol>","protected":false},"featured_media":468324,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-477119","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>EternalBlue: A Deep Dive into the Infamous Cyberweapon<\/mark>","faq_items":[{"question":"What is EternalBlue?","answer":"<p>EternalBlue is a powerful cyberweapon developed by the United States National Security Agency (NSA) that exploits a vulnerability in Microsoft's Windows operating systems. It allows attackers to remotely execute code on vulnerable systems, making it a dangerous tool in the hands of cybercriminals.<\/p>"},{"question":"How did EternalBlue become widely known?","answer":"<p>EternalBlue gained widespread attention when a group known as the Shadow Brokers leaked a significant portion of the NSA's hacking tools in August 2016. The leaked archive included EternalBlue, which marked its first public mention.<\/p>"},{"question":"How does EternalBlue work?","answer":"<p>EternalBlue targets a vulnerability in the Server Message Block (SMB) protocol used by Windows operating systems. By sending a specially crafted packet, the exploit triggers an overflow in the system's kernel pool, allowing attackers to execute their code remotely.<\/p>"},{"question":"What are the key features of EternalBlue?","answer":"<p>The key features that make EternalBlue dangerous are remote code execution, its worm-like propagation capability, stealthiness, and the ability to target Windows operating systems.<\/p>"},{"question":"What types of EternalBlue exploits exist?","answer":"<p>Various versions of EternalBlue exploits were leaked by the Shadow Brokers. Some of them include EternalRomance, EternalSynergy, EternalChampion, and EternalBlueBatch.<\/p>"},{"question":"How can EternalBlue be used, and what are the problems associated with it?","answer":"<p>EternalBlue has been used for malicious purposes, such as ransomware attacks, botnet propagation, and data theft. The problems it causes include massive financial losses and data breaches. To address these issues, it's essential to keep systems up-to-date with security patches and disable SMBv1.<\/p>"},{"question":"How does EternalBlue compare to similar cyber exploits?","answer":"<p>EternalBlue stands out due to its role in massive cyber attacks, like WannaCry. It differs from other exploits like Heartbleed, Shellshock, and Stuxnet in its target and impact.<\/p>"},{"question":"What are the future perspectives related to EternalBlue?","answer":"<p>The future of cybersecurity involves improved zero-day vulnerability management, advanced threat detection systems, and collaborative defense strategies to combat threats like EternalBlue.<\/p>"},{"question":"How can proxy servers be associated with EternalBlue?","answer":"<p>Proxy servers can serve as a defense against EternalBlue by filtering and inspecting network traffic. However, attackers may misuse proxy servers to hide their tracks and maintain anonymity while launching attacks.<\/p>"},{"question":"Where can I find more information about EternalBlue and related topics?","answer":"<p>For more information on EternalBlue, cybersecurity, and related subjects, you can refer to the provided links and OneProxy's informative article.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki\/477119","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/wiki\/477119\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/media\/468324"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/jp\/wp-json\/wp\/v2\/media?parent=477119"}],"curies":[{"name":"\u3046\u30fc\u3093","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}