12-Nov-10

國際特赦組織 (香港) 收到通知，本網站昨日受到網絡攻擊 (http://www.amnesty.org.hk/)。網站技術人員指當中並無任何敏感性消息及資料洩露，並同時移除該惡意程式。我們已經對攻擊源頭展開調查。

網絡攻擊由昨天開始，攻擊透過使用微軟IE瀏覽器第6及7版本 (Internet Explorer 6, Internet Explorer 7) 的漏洞，使攻擊者入侵及控制用戶電腦。使用IE第8版本 (Internet Explorer 8) 和其他瀏覽器的使用者亦不會受影響。

任何曾在11月10日早上至今天早上10時曾到訪本組織網頁的訪客，請務必利用防毒軟件，並下載最新的更新檔 (update patch) 來執行防毒掃瞄。

我們亦收到報告指一些疑似國際特赦組織電郵地址所發出的電郵，要求使用者按下連結下載檔案或報告。國際特赦組織 (香港) 所發出的一切電郵均來自@amnesty.org.hk。敬請不要開啟任何來歷不名的電郵或檔案。

國際特赦組織 (香港) 譴責任何網上惡意攻擊。我們同時亦已和香港警方及有關顧問緊密合作，徹查攻擊來源及攻擊者。我們亦會向有關當局提供一切相關資料，協助調查。

我們致力保障用戶的安全和私隱，並會採取一切方法保障用戶及杜絕同類事件再度發生。

國際特赦組織 (香港) 對是次事件帶來的不便致歉。
 

Amnesty International Hong Kong has been notified of a cyber attack on the website (http://www.amnesty.org.hk/). Website engineers have received no indication of any sensitive information or data being compromised, and have removed the malware from the site. Investigations are in progress to identify the origin of the attack.

The attack, which occurred yesterday, exploited vulnerabilities in Microsoft's Internet Explorer (IE) browsers, giving attackers control over machines running default versions of IE 6 and 7. Users of IE 8 and other web browsers were not affected by the attack.

Users who visited the website between the morning of November 10 and 10am today are advised to perform virus scan on their computer using the latest version of update patch.

There have also been reports where e-mails have been sent out from Amnesty-lookalike e-mail addresses, asking user to click on a link to download a report or document. Amnesty International Hong Kong only sends e-mails from Amnesty addresses (i.e. @amnesty.org.hk). You are advised not to open any suspicious e-mails from any other sources.

Amnesty International Hong Kong condemns any cyber attacks regardless of the origin or purpose, and is working closely with Hong Kong Police and technical consultants to determine the origins of the attack and perpetrators of the crime. We will work with the relevant authorities throughout the investigation process.

We are committed to protecting user security and privacy and are taking all necessary measures to prevent such breaches in the future.

Amnesty International Hong Kong is sorry for any inconvenience caused by this incident.