Google：駭客組織 ShinyHunters 擴大對甲骨文 PeopleSoft 的攻擊

路透9月25日電——Google 旗下資安部門週五表示，駭客組織 ShinyHunters 已再度「大規模利用」甲骨文（Oracle）PeopleSoft 軟體的一項安全漏洞；該組織先前繞過了夏季攻擊後建立的防禦措施。Sept 25 (Reuters) - Google's cybersecurity unit said on Friday that hacking group ShinyHunters has renewed "mass exploitation" of a security flaw in Oracle's PeopleSoft software, after skirting defenses put up following attacks in the summer.

Mandiant 是在一份威脅情報報告中宣布此事。這份報告發布前數天，聲稱對多起重大資料外洩事件負責的 ShinyHunters 表示，已竊取美國聯邦調查局（FBI）人員資料。Mandiant made the announcement in a threat intelligence report released days after ShinyHunters, which has claimed responsibility for several major data breaches, said it had stolen FBI personnel data.

這波攻擊持續演變，可能讓仰賴 PeopleSoft 處理人力資源及其他關鍵職能的組織警鈴大作，並加深外界對即使資源充足的機構也可能存在弱點的疑慮。The evolving nature of the attack is likely to ring alarm bells at organizations that rely on PeopleSoft for human resources and other critical functions, and heighten concerns about the vulnerability of even well-resourced institutions.

Alphabet 旗下 Google 的這個部門表示，ShinyHunters 在5月27日至6月9日的攻擊中，利用甲骨文 PeopleSoft 企業軟體的一項漏洞，主要影響大學院校。The unit of Alphabet's Google said ShinyHunters exploited a bug in Oracle's PeopleSoft enterprise software in attacks from May 27 through June 9 that mainly affected universities.

Mandiant 表示，駭客因應5月至6月攻擊後發布的防禦指引調整手法，鎖定已導入網頁應用程式防火牆規則、但未套用甲骨文為修補該漏洞而發布更新的組織。Mandiant said the hackers adapted to defensive guidance published after the May-June attacks and targeted organizations that implemented web application firewall rules but did not apply an update that Oracle issued to patch the vulnerability.

Mandiant 未指明受害者，但表示最新攻擊影響全球數十個系統，涉及產業涵蓋高等教育、科技、醫療保健、農業、運輸及政府等不同領域。It said, without identifying victims, that the latest attack affected dozens of systems globally in sectors as varied as higher education, technology, healthcare, agriculture, transportation and government.

ShinyHunters 表示，該組織是利用 PeopleSoft 的漏洞取得 FBI 資料。路透社尚無法證實這項說法。甲骨文未回應採訪請求。ShinyHunters has said it accessed FBI data using a vulnerability in PeopleSoft. Reuters has not been able to corroborate the claim. Oracle did not respond to requests for comment.

美國聯邦調查局週三發布聲明表示，正「積極調查」這起據報外洩事件。In a statement issued Wednesday, the Federal Bureau of Investigation said it was "aggressively investigating" the reported breach.

路透社先前報導，ShinyHunters 曝光了在 FBI 敏感單位工作的人員姓名，並取得醫療與精神科紀錄。ShinyHunters exposed the names of personnel working in sensitive FBI units and acquired medical and psychiatric records, Reuters previously reported.

（Natalia Bueno Rebolledo 與 Mrinmay Dey 墨西哥城、Raphael Satter 華盛頓報導；Christopher Cushing 編輯）(Reporting by Natalia Bueno Rebolledo and Mrinmay Dey in Mexico City, and Raphael Satter in Washington; Editing by Christopher Cushing)