• IP addresses are NOT logged in this forum so there's no point asking. Please note that this forum is full of homophobes, racists, lunatics, schizophrenics & absolute nut jobs with a smattering of geniuses, Chinese chauvinists, Moderate Muslims and last but not least a couple of "know-it-alls" constantly sprouting their dubious wisdom. If you believe that content generated by unsavory characters might cause you offense PLEASE LEAVE NOW! Sammyboy Admin and Staff are not responsible for your hurt feelings should you choose to read any of the content here.

    The OTHER forum is HERE so please stop asking.

TSMC virus down whole firm for many days! All wiped out! Use MicroSHIT! Taiwan Semiconductor & IT SHAME SHAME! Eat Shit!

democracy my butt

Alfrescian
Loyal
https://tw.news.yahoo.com/台積電當機震驚全球-周日拚全面恢復運作-092222056.html

震驚全球 周日拚全面恢復運作

聯合新聞網


5.3k 人追蹤

聯合線上
2018年8月5日 下午5:22


台積電昨天證實,生產製造核心「電腦整合製造(CIM)系統」前天傍晚遭電腦病毒入侵,導致北中南三地工廠大當機,經緊急切斷連線,重灌軟體,逐步恢復生產線。這是台積電CIM系統首次因病毒感染影響工廠運作,內部緊急下達動員令,希望今天全數恢復所有產線。
張忠謀交棒不到兩個月
台積電創辦人張忠謀六月五日才剛交棒退休,八月三日傍晚就出現公司成立以來機台因病毒感染無法運作的最嚴重情況,且影響遍及竹科、中科與南科廠區,台積電幾乎所有的台灣廠區都受到影響。
資安模範生意外出包
尤其,台積電正值七奈米和十二奈米產能全數衝刺時刻,又是全台資安防範模範生,此次釀成成立以來最大生產體系大當機,不僅震驚全球供應鏈,更讓台積電感受空前的震撼和緊張。
台積電昨天不願透露發生原因,僅表示內部已掌握發生原因與源頭,可以判定這次並不是駭客攻擊事件,也不是有人刻意鎖定攻擊,並可以確保事件不再發生。台積電強調,目前病毒已被控制,也有解決方案,受影響機台正逐步恢復生產;受病毒感染的程度因工廠而異,部分在短時間內已恢復正常,其餘預計在一天內,即最慢今天都會恢復正常。
台積電不評論事件是否有人為疏失,僅表示目前以恢復生產為首要重點工作,並將與客戶溝通,內部還不談相關責任追究。
熟悉資安防護的人士透露,置放病毒的人「實在太厲害」,竟能同時撼動台積電竹科、中科和南科三個地方主力生產工廠,不排除可能是內部員工所為。
「連門禁系統也掛了」
據了解,台積電前晚十時即發現電腦病毒入侵CIM,導致二座八吋廠Fab三、Fab五,以及竹科Fab十二、南科Fab十四、中科Fab十五等十二吋廠大當機。有網友在批踢踢(PTT)網站爆料,稱「聽到很多台積友人回報台積大當機中,連門禁系統都掛了。」甚至有人表示,「聽說全中」、「門禁當機接著又產線當機,感覺不單純。」
據了解,台積電在前天晚間及昨天一早就火速召回資安及CIM維護工程師,全力搶修。為避免生產機密遭竊,立即切斷所有生產體系和CIM的電腦連線,導致北中南三地工廠大當機。
產線當機恐影響營收
台積電供應鏈強調,只要解決CIM遭入侵的病毒問題,系統軟體重灌,應可以逐步恢復生產。但市場人士說,產線當機對公司產能與營收一定會有影響,這部分有待台積電做進一步說明。
台積電染毒損失慘
生產線疑遭入侵 估影響營收30億元
台積電USB病毒 專家:恐外圍先感染



https://tw.news.yahoo.com/台積電-病毒感染原因是新機台安裝軟體時操作失誤-092222235.html

台積電:病毒感染原因是新機台安裝軟體時操作失誤

聯合新聞網


5.3k 人追蹤

聯合線上
2018年8月5日 下午5:22


台積電今天下午4點46分發布重訊,針對電腦病毒感染事件提供進一步說明。台積電指出,病毒感染的原因是「新機台在安裝軟體的過程中操作失誤」,因此病毒在新機台連接到公司內部電腦網路時發生病毒擴散的情況,但是台積電資料完整性和機密資訊都未受到影響。到今天下午兩點為止,約八成受影響機台已經恢復正常。
台積電指出,三日傍晚受到電腦病毒感染,影響台灣廠區部分電腦系統及廠房機台,受病毒感染的程度因工廠而異。台積電已控制此病毒感染範圍,同時找到解決方案。至台灣時間下午兩點為止,約百分之八十受影響的機台已經恢復正常。台積電預計在八月六日前,所有受影響機台皆能夠恢復正常。
台積電表示,預估這次病毒感染事件將導致晶圓出貨延遲以及成本增加,對台積公司第三季的營收影響約為百分之三,毛利率影響約為一個百分點。台積電有信心第三季晶圓出貨延遲數量將於第四季補回,全年業績展望以美元計仍將維持7月19日所說的高個位數成長。
台積電表示,公司多數客戶都已收到相關事件的通知,台積電也正與客戶緊密合作,溝通其晶圓交貨時程,台積公司將在未來幾天內與個別客戶溝通細部資訊。
台積電表示,已採取措施彌補此安全問題,同時將進一步加強資訊安全措施。
台積電染毒損失慘
詭異!3地同時毒發 台積電應釋疑
生產線疑遭入侵 估影響營收30億元



https://tw.news.yahoo.com/詭異-3地同時毒發-台積電應釋疑-215014040--finance.html


詭異!3地同時毒發 台積電應釋疑

中時電子報


8.5k 人追蹤

黃有容╱台北報導
2018年8月5日 上午5:50


中國時報【黃有容╱台北報導】
針對台積電北中南3地機台產線「中毒」,導致機台同步遭病毒感染,工研院前主任杜紫宸質疑,一般電腦系統病毒應該無法「直接感染」到晶圓生產系統,實在「匪夷所思」,更呼籲為防投資人恐慌,台積電應盡快進一步說明。
資安專家則認為,駭客已升級,這年代不會「只做」讓企業系統感染病毒這種事,駭客會「客製化」攻擊特定產業或頂尖企業,遭病毒感染大多只是第一步,這也凸顯台積電資安問題。
一位不具名的業內半導體工程師也指出,不管是刻意或疏失,資安事件發生一定是人為因素,只是事件發生在紀律嚴明的台積電,令人難以想像。
杜紫宸稍晚在個人臉書上公開質疑,半導體機台上所用的軟體,推測應是專屬作業系統,一般電腦系統上的病毒,應無法直接「感染」晶圓生產系統,且多處機台「同時中毒」也不正常,疑點重重。
杜紫宸受訪時表示,如果像台積電所說是病毒而非駭客,據業內人士猜測,有一種可能是「機台買進來時就帶有原始病毒」,而且可能設定了一樣的毒發時間;另一種可能,是從最上層的雲端控制系統感染。另外,若原因為前者,為什麼只有台積電的機台毒發,而購買一樣機台的其他業者沒有傳出災情,他認為「很詭異」。
資安專家則提醒,現在的駭客會以「客製化」方式針對特定企業攻擊,而病毒感染就是駭客入侵的第一步驟;病毒被植入系統之後,經過一段潛伏期,再攻擊次要目標,轉移企業注意力,接著才會攻擊真正的目標,去年遠銀被駭事件就是一例,最後遭駭客盜轉高達18億元。專家建議,台積電應做全面性檢查。
台積電在台灣產業影響力「牽一髮動全身」,杜紫宸認為,目前台積電給出的訊息太少,無法消弭投資人疑慮,若不知道病毒來自哪裡、中毒原因,永遠不知道會不會再發生,呼籲台積電在不影響商業機密保護下,向投資人具體說明。
資安防護亮紅燈



https://tw.news.yahoo.com/%E5%8F%B0%E7%A9%8D%E9%9B%BB%E7%95%B6%E6%A9%9F%E9%9C%87%E9 %A9%9A%E5%85%A8%E7%90%83-%E5%91%A8%E6%97%A5%E6%8B%9A%E5%85%A8%E9%9D%A2%E6% 81%A2%E5%BE%A9%E9%81%8B%E4%BD%9C-092222056.html


Shocked the world, fully resumed operation on Sunday
[Joint News Network]
United News Network

5.3k person tracking

Union line
August 5, 2018, 5:22 PM


TSMC confirmed yesterday that the production of the core "Computer Integrated Manufacturing (CIM) System" was invaded by computer viruses the night before, causing the North, Central and South China factories to crash, re-injecting software and resuming the production line. This is the first time that TSMC's CIM system has affected the operation of the factory due to virus infection. The internal emergency order has been issued, and it is hoped that all production lines will be restored today.

Zhang Zhongmou pays less than two months

Zhang Zhongmou, founder of TSMC, just retired on June 5th. On the evening of August 3, the most serious situation that the machine could not operate due to virus infection has appeared since the establishment of the company, and it affects all branches of Zhuke, Zhongke and Nanke. All Taiwanese factories are affected.

Zi'an model student unexpectedly out of the package

In particular, TSMC is in full swing of the capacity of seven nanometers and twelve nanometers. It is also a model for the protection of Taiwan's security. The biggest production system since its establishment has not only shocked the global supply chain, but also made TSMC feel Unprecedented shock and tension.

TSMC did not want to disclose the reason yesterday. It only said that the internal cause and source have been mastered. It can be judged that this is not a hacking attack, nor is someone deliberately locking the attack, and can ensure that the incident does not happen again. TSMC stressed that the virus has been controlled and there are solutions. The affected machines are gradually resumed production. The degree of virus infection varies from factory to factory, and some have returned to normal in a short period of time. The rest is expected to be the slowest in one day. It will return to normal today.

TSMC does not comment on whether there is any incident in the incident. It only indicates that the current focus is on restoring production, and will communicate with customers. The relevant accountability is not discussed internally.

Those familiar with security protection revealed that the people who placed the virus were "very powerful," and they were able to simultaneously shake up the main production plants in three places: TSMC, Zhongke and Nanke. It is not possible to rule out internal employees.

"The access control system is also hung up."

It is understood that TSMC found computer virus invading CIM at 10 o'clock in the evening, resulting in two Bagua factory Fab III, Fab V, and Bamboo Fab 12, Nanke Fab XIV, Zhongke Fab 15 and other 12 factories. Big crash. Some netizens broke the news on the PTT website and said that "I heard a lot of Taiwanese friends returning to the TSMC and even the access control system was hung up." Some even said that "I heard that the whole middle school" and "access control were down Then the production line crashed and it was not simple."

It is understood that TSMC recalled Zi'an and CIM maintenance engineers in the evening before yesterday morning and yesterday morning, and spared no effort to repair. In order to avoid theft of production secrets, the computer connection of all production systems and CIM was immediately cut off, resulting in a large crash in the factories in North, Central and South China.

Production line crashes will affect revenue

The TSMC supply chain emphasizes that as long as the CIM is invaded by the virus, the system soft weight irrigation should be able to gradually resume production. However, market participants said that the production line crash will have an impact on the company's production capacity and revenue. This part is subject to further explanation by TSMC.

TSMC has suffered a lot of damage

● The production line is suspected of being invaded. It is estimated that the revenue will be 3 billion yuan.
● TSMC USB virus Expert: fear of peripheral infection first




https://tw.news.yahoo.com/台積電-病毒感% E6%9F%93%E5%8E%9F%E5%9B%A0%E6%98%AF%E6%96%B0%E6%A9%9F%E5%8F%B0%E5%AE%89%E8% A3%9D%E8%BB%9F%E9%AB%94%E6%99%82%E6%93%8D%E4%BD%9C%E5%A4%B1%E8%AA%A4-092222235.html


TSMC: The cause of the virus infection is an operation error when installing the software on the new machine.
[Joint News Network]
United News Network

5.3k person tracking

Union line
August 5, 2018, 5:22 PM


TSMC issued a renewed news at 4:46 pm today to provide further explanations for computer virus infections. TSMC pointed out that the cause of the virus infection was "the new machine was operating incorrectly during the installation of the software", so the virus spread when the new machine was connected to the company's internal computer network, but TSMC data integrity and confidential information None of them have been affected. By 2 o'clock this afternoon, about 80% of the affected machines have returned to normal.

TSMC pointed out that it was infected with computer viruses in the evening of the third day, affecting some computer systems and factory machines in the Taiwan factory. The degree of virus infection varies from factory to factory. TSMC has controlled the scope of this virus infection and found a solution. At about 2 pm Taiwan time, about 80% of the affected machines have returned to normal. TSMC expects that all affected machines will return to normal before August 6.

TSMC said that the virus infection incident will lead to delays in wafer shipments and increased costs. The impact on TSMC's third quarter revenue is about 3%, and the gross profit margin impact is about one percentage point. TSMC is confident that the number of wafer shipment delays in the third quarter will be replenished in the fourth quarter, and the full-year outlook will continue to maintain the high single-digit growth in July 19 in US dollars.

TSMC said that most of the company's customers have received notice of relevant events, and TSMC is also working closely with customers to communicate their wafer delivery schedules. TSMC will communicate detailed information with individual customers in the next few days.

TSMC said that measures have been taken to make up for this security issue and information security measures will be further strengthened.

TSMC has suffered a lot of damage

● Surprise! At the same time, the three places are poisonous. TSMC should be released.
● The production line is suspected of being invaded. It is estimated that the revenue will be 3 billion yuan.




https://tw.news.yahoo.com/詭異-3地同時毒 %E7%99%BC-%E5%8F%B0%E7%A9%8D%E9%9B%BB%E6%87%89%E9%87%8B%E7%96%91-215014040--finance.html



Surprising! At the same time, the three places are poisonous. TSMC should be released.
[中时电子报]
Zhongshi News

8.5k person tracking

Huang Yourong, Taipei Report
August 5, 2018, 5:50 am


China Times [Huang Yourong, Taipei Report]

In response to the "poisoning" of the TSMC North Central South 3 production line, the machine was infected with the virus at the same time. Du Zizhen, former director of the Industrial and Technological Research Institute, questioned that the general computer system virus should not be "directly infected" into the wafer production system, which is "unbelievable". It also calls for anti-investor panic, TSMC should further explain as soon as possible.

The security experts believe that the hackers have been upgraded. In this era, they will not "do only" the enterprise system to be infected with the virus. The hackers will "customize" to attack specific industries or top enterprises. Most of the virus infections are only the first. Steps, this also highlights TSMC's security issues.

An unnamed industry semiconductor engineer also pointed out that whether it is deliberate or negligent, the Zi'an incident must be a human factor, but the incident occurred in the disciplined TSMC, which is unimaginable.

Du Ziyan publicly questioned her personal Facebook later. The software used on the semiconductor machine is supposed to be a proprietary operating system. The virus on the general computer system should not directly "infect" the wafer production system, and multiple machines. At the same time, poisoning is not normal, and there are many doubts.

Du Ziyan said in an interview that if TSMC said it was a virus rather than a hacker, according to speculation in the industry, there may be a possibility that "the machine will carry the original virus when it is bought," and it may set the same poisoning time. Another possibility is to get infected from the top level of the cloud control system. In addition, if the reason is the former, why is the TSMC machine only poisoned, and other operators who bought the same machine did not report the disaster, he thought that it was "very strange."

The security experts reminded that the current hackers will attack the specific enterprise in a "customized" way, and the virus infection is the first step of the hacker invasion; after the virus is implanted into the system, after a period of incubation, the attack is secondary. The goal is to divert the attention of the company and then attack the real target. Last year, the incident of the bankruptcy of Yuanyin was an example. In the end, the hacker hacked as much as 1.8 billion yuan. Experts suggest that TSMC should conduct a comprehensive inspection.

TSMC’s influence in Taiwan’s industry is “taking a whole body.” Du Zizhen believes that TSMC’s message is too small to dispel investors’ doubts. If you don’t know where the virus is coming from, the cause of poisoning, you will never know if it will happen again. It is called for TSMC to specify to investors without affecting the protection of trade secrets.

Security protection red light
 

democracy my butt

Alfrescian
Loyal
https://www.theregister.co.uk/2018/08/04/security_roundup/



Security


TSMC chip fab tools hit by virus, payment biz BGP hijacked, CCleaner gets weird – and more
What else is gong on in infosec this week...

By Shaun Nichols in San Francisco 4 Aug 2018 at 10:03

11 SHARE ▼
shutterstock_credit_card.jpg


Roundup This week we took a close look at Google security keys, bid adieu to Facebook's head security honcho, and had a few email credentials overshared by Atlassian.

Here's everything else that happened in infosec land this week beyond what we've already reported.
TSMC chip assembly line computers infected

Chipmaker TSMC – which supplies components for Apple, AMD, Nvidia, Qualcomm, Broadcom, and others – said its semiconductor fab tools were downed by a virus.

The malware hit the Taiwanese manufacturing giant's systems on Friday night, and some plants remain infected at time of writing while others have been restored to operation. It is not believed to be the result of an intrusion by one or more hackers – it sounds as though a staffer accidentally ran some kind of software nasty, and pwned computers on the network.

"Certain factories returned to normal in a short period of time, and we expect the others will return to normal in one day," the biz told the media on Saturday.
 

democracy my butt

Alfrescian
Loyal
https://www.channelnewsasia.com/new...fab-tools-infected-by-computer-virus-10589202

TSMC says a number of fab tools infected by computer virus

FILE PHOTO: A logo of Taiwan Semiconductor Manufacturing Co (TSMC) is seen at its headquarters in Hsinchu, Taiwan October 5, 2017. REUTERS/Eason Lam/File Photo

04 Aug 2018 04:10PM (Updated: 04 Aug 2018 08:49PM)
Share this content


Bookmark


TAIPEI: Taiwan Semiconductor Manufacturing Company (TSMC), the world's largest contract chipmaker, said on Saturday (Aug 4) a number of its tools had been infected by a virus and the problem had been contained.
TSMC, a major supplier for Apple, said a number of tools were infected on Friday.


"TSMC has contained the problem and found a solution, and recovery of the tools is in progress," it said in a statement.
Rumours that TSMC had suffered a hacker attack were incorrect, it said.
The company said there was uneven impact across several of its fabs.
"The degree of infection varies by fab. Certain fabs returned to normal in a short period of time, and we expect the other fabs will return to normal in one day."


The company did not respond to a Reuters request for comment on whether the computer virus impacted its weekend production.
Major tech companies in Taiwan, which form a crucial part of the global electronics supply chain, usually enter a busier period in the second half of the year ahead of tech gadget launches.
Source: Reuters/ng

file-photo--a-logo-of-taiwan-semiconductor-manufacturing-co--tsmc--is-seen-at-its-headquarters-in-hsinchu-3.jpg
 

pusy2rights

Alfrescian
Loyal
Girl told me Singapore TSMC plant toilet Haunted. When alone inside at night the taps will run themselves and jamban will flush themselves! When many people this doesn't happen.
 

democracy my butt

Alfrescian
Loyal
https://www.theverge.com/2018/8/4/1...nductor-manufacturing-co-tsmc-virus-shut-down


iPhone supplier TSMC shut down factories after virus attack

31 comments
The company makes processors for Apple, Qualcomm, and others

By Andrew Liptak@AndrewLiptak Aug 4, 2018, 1:54pm EDT

Share

Fab12inr002_130.0.jpg
Image: Taiwan Semiconductor Manufacturing Co., Ltd.
Chipmaker Taiwan Semiconductor Manufacturing Co. shut down several of its factories last night after it its systems were hit by a computer virus, reports Bloomberg.
TSMC is the largest semiconductor manufacturer in the world, and supplies components for companies like AMD, Apple, Nvidia, and Qualcomm. The company told Bloomberg that the virus infected a “number of its fabrication tools,” but that the “degree of infection varies” from factory to factory. Several have resumed their operations, but others won’t come back online until tomorrow. The company indicated that its factories weren’t infected by a hacker.
This is the first time the company’s production lines have been affected by a virus
“TSMC has been attacked by viruses before,” CFO Lora Ho told Bloomberg, “but this is the first time a virus attack has affected our production lines.” She didn’t disclose whether or not the affected lines were producing processors for Apple, nor what revenue has been lost as a result.
The slowdown comes at a critical time for the company, as many tech firms are working to release their next generation of products this fall. In May, the company began manufacturing Apple’s A12 chip, which is expected to be used in this year’s line of iPhones, and which is the first to use a new 7nm process that should make the chips more smaller, faster, and efficient.
 

democracy my butt

Alfrescian
Loyal
https://www.channelnewsasia.com/new...uarter-revenue-hit-by-computer-virus-10591040

Technology TSMC says third-quarter revenue hit by computer virus

05 Aug 2018 06:25PM
Share this content


Bookmark


TAIPEI: A computer virus outbreak has hit third-quarter results at Taiwan Semiconductor Manufacturing Company Ltd, the world's largest contract chipmaker, the company said on Sunday.
On Saturday, TSMC, a major supplier for Apple Inc, said that a number of its computer systems and fab tools had been infected by a virus, but the problem had been contained.


The company expects full recovery on Aug. 6, the company said in an updated statement on Sunday.
"TSMC expects this incident to cause shipment delays and additional costs. We estimate the impact to third quarter revenue to be about three percent, and impact to gross margin to be about one percentage point," it said.
"The company is confident shipments delayed in third quarter will be recovered in the fourth quarter 2018, and maintains its forecast of high single-digit revenue growth for 2018 in U.S. dollars given on July 19, 2018."
The chipmaker has notified its customers and is working with them on the wafer delivery schedule. Details will be provided to each customer individually over the next few days, it said.


The virus outbreak occurred during the software installation for a new tool, which caused a virus to spread once the tool was connected to the company's computer network, TSMC said.
"Data integrity and confidential information was not compromised. TSMC has taken actions to close this security gap and further strengthen security measures," it said.
(Reporting by Jess Macy Yu, editing by Larry King)
Source: Reuters
Tagged Topics
 

eatshitndie

Alfrescian (Inf)
Asset
notice that this only happens at china factories. prc is full of viruses including prostitute-borne std's. :rolleyes:
 

democracy my butt

Alfrescian
Loyal
TSMC DUMB ASS still using MicroSHIT Windoze 7!

Chiak Sai and die! Win 7 is a TRUE PIECE OF CRAP!

No wonder they got attacked, and it is by a WANNACRY styled Ransom-ware! They want to extort money, but usually just cause nothing but ruin, you can pay them, but you will still not get your system back, because the quality and performance of MS windoze are too poor, even the Ransom-ware encryption / decryption process is failed! It will only destroy not possible to recover.


https://tw.news.yahoo.com/台積電機台還在用win7-更換過程複雜不簡單-101717645.html

台積電機台還在用Win7?更換過程複雜不簡單

今日新聞NOWnews


7.7k 人追蹤

記者許家禎/台北報導
2018年8月6日 下午6:17


台積電爆發病毒感染事件,台積電總裁魏哲家今(6)日親上火線做出說明,他說他出面是為了讓大家安心,實際上這起事件沒有駭客、也不是針對台積電而來,完全就是人為疏忽,其中也提到機台仍在使用Windows 7。有人質疑,為何不更換為新的作業系統?魏哲家指出,系統軟體是跟著機台出來的,想更換的過程非常複雜,「並沒有想像中的簡單」。
魏哲家表示,此次的病毒為WannaCry的一個變種,造成機台當機以及重複開機。且此次受感染的機台與自動搬運系統,以及相關的電腦系統,主要是使用Windows 7,卻未安裝修正軟體於機台自動化介面,以致發生此一事件。但包括生產製造資料庫以及客戶資料皆不受影響。
他在會上多次強調,他不認為這是針對台積電而來,沒有人綁架、沒有駭客問題,純粹是人為安裝軟體疏忽、沒有按照流程掃毒,錯誤在於連上網路而讓機台內的病毒擴散出去,他們也很驚訝與震撼,並說人類不可能永遠都不犯錯,未來會設計防呆機制讓系統自動偵測。
至於媒體提問,有沒有可能更換Windows 7以上系統,魏哲家表示,因為系統軟體是跟著機台出來的,配套設計「沒有想像中的簡單」,如果系統有更新,都必須先關機再做處理與升級,有些老舊電腦要做軟體更新或升級,都要花費大量時間,而且也與客戶端有關,再不然就得進一步跟機台供應商溝通協商,過程相當複雜。



https://tw.news.yahoo.com/個失誤損失78億-想哭-動員數百工程師搶救-065031357.html

一個失誤損失78億 「想哭」動員數百工程師搶救

聯合新聞網


5.3k 人追蹤

聯合線上
2018年8月6日 下午2:50


台積電這次面臨史上最大的資安威脅。據了解,包括董事長劉德音、總裁魏哲家都在第一時間掌握資訊,要求全力防堵「疫情」擴散。儘管逢周末,台積電資安人員也都停休回到崗位,粗估動員數百人次資安工程師,務求在60小時內完全「排毒」;同一時間,公司也主動對客戶說明事件內容與影響。
外傳此次禍首是名為「想哭」的病毒,其感染力與破壞力強,連台積電這樣擁有最高規格資安技術的國際大廠也吃足苦頭。
儘管台積電並未對內部動員狀況進一步說明,但在國內主要網路論壇中,已有不少台積電員工或眷屬談論到此事,不少人提到事件發生後,「停休」、「衝回廠區處理問題」等狀況。
此次中毒事件,包括蘋果、輝達等主要大廠晶片生產都受影響,台積電也積極與客戶聯繫。台積電強調,在事件發生後,多數客戶皆已收到相關事件通知,台積電也正與客戶緊密合作,溝通晶圓交貨時程,並將在未來幾天與個別客戶溝通細部資訊。
台積電生產線首次遭因控制系統中毒而癱瘓,對被外界一向視為資安防護滴水不漏的台積電,堪稱是一記重錘,尤其事件發生在台積電創辦人張忠謀和前資訊長左大川退休不久後,更引發諸多揣測。
左大川曾在本報舉辦的防駭大作戰論壇當中,首次公開分享台積電防駭戰略和做法。他當時透露,台積電每天遭到病毒和駭客攻擊不下千次,但台積電有嚴密的多層防護。
不過,台積電8月3日還是百密一疏,因操作新機台在安裝軟體的過程中出現失誤,操作人員未按標準作業流程,將裝在USB機台的程式事先掃毒,才會讓病毒在新機台連接到公司內部電腦網路時發生病毒擴散。
台積電遭逢史上最大的資安威脅,一個失誤讓台積電本季營收短少約78億元,付出代價不小。



https://tw.news.yahoo.com/%E5%8F%B0%E7%A9%8D%E9%9B%BB%E6%A9%9F%E5%8F%B0%E9%82%84%E5 %9C%A8%E7%94%A8win7-%E6%9B%B4%E6%8F%9B%E9%81%8E%E7%A8%8B%E8%A4%87%E9%9B%9C%E4% B8%8D%E7%B0%A1%E5%96%AE-101717645.html


Is TSMC still using Win7? The replacement process is complicated and not simple
[Today's News NOWnews]
Today's News NOWnews

7.7k person tracking

Reporter Xu Jiayu / Taipei Report
August 6, 2018, 6:17 PM


TSMC’s virus infection occurred. Wei Zhe, president of TSMC, made a statement on the fire line today (6). He said that he came out to make everyone feel at ease. In fact, this incident did not involve hackers or TSMC. It was completely artificial. Negligence, which also mentioned that the machine is still using Windows 7. Some people questioned why not replace it with a new operating system? Wei Zhejia pointed out that the system software is coming out of the machine. The process of replacing it is very complicated. "It is not as simple as imagined."

Wei Zhejia said that the virus was a variant of WannaCry, causing the machine to crash and restart. And this infected machine and automatic handling system, and related computer systems, mainly using Windows 7, but did not install the correction software in the machine automation interface, resulting in this incident. However, the manufacturing database and customer data are not affected.

He repeatedly stressed at the meeting that he did not think that this was for TSMC. No one kidnapped or hacked. It was purely a software installation negligence, and did not follow the process. The mistake was to connect to the network and let the machine The virus spread out, they are also very surprised and shocked, and said that human beings can never make mistakes, the future will design a foolproof mechanism to allow the system to automatically detect.

As for the media question, is it possible to replace the Windows 7 or higher system, Wei Zhejia said, because the system software is followed by the machine, the supporting design "is not as simple as imagined", if the system is updated, it must be shut down before processing and upgrading. Some old computers have to spend a lot of time to update or upgrade software, and they are also related to the client. Otherwise, they have to communicate and negotiate with the machine supplier. The process is quite complicated.






https://tw.news.yahoo.com/個失誤損失78億-% E6%83%B3%E5%93%AD-%E5%8B%95%E5%93%A1%E6%95%B8%E7%99%BE%E5%B7%A5%E7%A8%8B%E5 %B8%AB%E6%90%B6%E6%95%91-065031357.html


A turnover loss of 7.8 billion "Want to cry" mobilized hundreds of engineers to rescue
[Joint News Network]
United News Network

5.3k person tracking

Union line
August 6, 2018, 2:50 pm


TSMC faced the biggest threat to security in history. It is understood that including Chairman Liu Deyin and President Wei Zhejia are in the first place to grasp the information and demand full efforts to prevent the spread of "epidemic". Despite the weekend, TSMC's security personnel also stopped to return to their posts, and ruthlessly mobilized hundreds of civil security engineers to completely “detoxify” within 60 hours. At the same time, the company also actively explained the content and impact of the incident to customers.

It is said that the culprit is a virus called "Want to Cry," which has strong appeal and destructive power. Even the world's largest manufacturers with the highest specification of security technology such as TSMC have suffered.

Although TSMC did not further explain the internal mobilization situation, in the major domestic online forums, many TSMC employees or relatives have talked about this matter. Many people mentioned that after the incident, they "stopped" and "rushed back". The situation in the plant area is handled.

The poisoning incident, including the production of major wafers such as Apple and Huida, was affected, and TSMC also actively contacted customers. TSMC stressed that after the incident, most of the customers have received relevant event notifications, and TSMC is also working closely with customers to communicate the wafer delivery schedule and will communicate detailed information with individual customers in the next few days.

For the first time, the TSMC production line was plagued by poisoning by the control system. It is a heavy hammer for TSMC, which has always been regarded as a leak-proof of security protection by the outside world. Especially after the retirement of TSMC founder Zhang Zhongmou and former information chief Zuo Dachuan, More caused a lot of speculation.

Zuo Dachuan once shared the TSMC flood prevention strategy and practices for the first time in the flood control forum held by the newspaper. He revealed at the time that TSMC was attacked by viruses and hackers for thousands of times a day, but TSMC had strict multi-layered protection.

However, on August 3, TSMC was still a hundred secrets. Due to the mistakes in the operation of the new machine during the installation of the software, the operator did not follow the standard operating procedures and pre-installed the program installed on the USB machine. The virus spread when the new machine was connected to the company's internal computer network.

TSMC has been the biggest threat to Zi'an in history. One mistake made TSMC's revenue this quarter short of about 7.8 billion yuan, which is not a small price.
 
Top