-
Our Services
- New Industrialisation
-
Smart Manufacturing
- Smart Manufacturing
-
IIOT
- IIOT
- Industrie 4.0 - Smart Enterprise
- Product Lifecycle Management Consultancy
- Intelligent Automatic Warehousing and Logistics
- Real-Time Manufacturing Tracking System
- Knowledge Based Engineering & CAD Solution
- Location Based Services and Location Analytics
- The HATCH
- Hong Kong Industrial Drone Technology Centre
-
AI & Robotics
- AI & Robotics
- AI Sheet Metal Surface Defect Detection Technology
- Product Innovation and Design Management
- Robotics Application
- Automation Feasibility Study
- 3D Automatic Processing
- Application and Research on Vision and Ultrasonic Inspection Assisted by Artificial Intelligence and Robotics
- Customized Intelligent and Cognition Automation Machine & System Development
- Autonomous Air-ground Cooperative Tunnel Inspector
- AR-Empowered Robot Control System (ARERC System)
- IoT-enabled Smart Toilet Bowl Cleaning System
- Novel Materials
-
Advanced Manufacturing Technology
- Advanced Manufacturing Technology
- 3D Scanning and Reverse Engineering Service
- Flexible Metallic Fiber Physical Porous Part Fabrication Technology
- Advanced Mould Cooling Technology and CAE Conformal Cooling Analysis
- Gas Atomisation Technology
- Dual Laser Metal Polishing Technology
- Advanced Additive Manufacturing, 3D Printing Technology, and Direct Manufacturing
- Diffusion Bonding Technology
- Electrically-Assisted Free Forming (EAFF) Technology for Customisation of Sheet Metal Parts
- Plastic Process and Machinery Technology
- Fashion and Garment Technology
- Computer Aided Technology (CAx)
- Watch Assembly Automation Technology
-
Digital Transformation
- Digital Transformation
- HKPC Digital DIY Portal
- Digital Transformation Support
- 「FitEasy」Virtual Fitting Technology - For People with Disability
- Smart Solution
- Research and Analytics
- Strategic IT Management
- Embedded Software System
- New Media and Learning Technology Development
- IT Industry Support
- DevOps Maturity Assessment and Consultancy Service
- Software Testing Automation Consultancy Service
- Blockchain Consulting Service
- Extended Reality (XR) technology and consultancy service
-
Cyber Security
- Cyber Security
- Cyber Security
- Cybers Security-by-design, Privacy and Compliance-by-default
- Design & Architecture
- Train & Develop
- Offensive Security
- Intelligent Security
- Defensive Security
- Intelligent Hardening
- Internet of Things (IoT) & Operational Technology (OT) Cyber Security Testing
- Phishing Defence Services
- Cyber Security Assessment & Audit
- Cyber Security Consultancy for i4.0 & e4.0
-
Green & Smart Living
- Green & Smart Living
- Green Technology
-
HealthTech and Chinese Medicine
- HealthTech and Chinese Medicine
- R&D service and Functional Investigation on Chinese Medicine, Health Food & Wellness product
- Compliance Consultation Service for Chinese Medicine, Pharmaceutical, Health Food and Medical Device Industries
- Manufacturing Enhancement - Automatic Intelligent System for Production and Packaging in Chinese Medicine, Pharmaceutical and Health Food Industries
- Assisting funding application for local medicine and health industrial associations
- “The Cradle” Services for Health Tech and TCM Industry
- Food Technology
- Smart Living
-
Corporate Sustainability
- Corporate Sustainability
- ESG and Sustainability Services
- Manufacturing Technology (Tooling, Metals & Plastics) Recognition of Prior Learning (RPL) Mechanism
- Market Research and Analytics
- Business Innovation
- Sustainability-related standards and guidance
- Organisation Innovation Capability Development
- District Innovation
- Customer Service Assessment
- Intellectual Property (IP) Protection and Management
- Support to Creative Industries
- Manufacturing Standards Consultancy Service
- Production Capacity Optimisation
- Cost of Quality
- FutureSkills
- SME Support
- Funding
- Testing & Standards
-
Support & Resource
- Technology Transfer
-
Support Centres
- Support Centres
- The Cradle – Go Global Service Centre
- Life & Health Tech Hall
- HKPC-HP 3D Printing Technology Centre
- Future Manufacturing Hall
- Celesphere
- Inno Space
- The HATCH
- Intellectual Property Services Centre
- Advanced Electronics Processing Technology Centre
- Green Living Laboratory
- Reliability Testing Centre
- Electromagnetic Compatibility Centre
- Plastics Technology Centre
- Smart Wearables, Watch & Clock Technology Centre
- Conformal Cooling Technology Centre
- Hong Kong Digital Testing Hub
- Hong Kong Industrial Drone Technology Centre
- Aqua Research Laboratory
- Advanced Materials and Intelligent Manufacturing Centre
- Hong Kong Joint Research Lab for Applications of Intelligent Automation Technology
- Future FoodTech Lab
- HKUST-HKPC Joint Research Lab for Industrial AI and Robotics
- Hong Kong Industrial Artificial Intelligence & Robotics Centre (FLAIR)
- Testing & Standards
- HKPC Spotlights
- About US
-
LANGUAGE
HKCERT緊急呼籲用戶及服務供應商立即檢視帳戶安全 嚴防國泰帳戶遭非法登入等事故再發生 (Chinese Only)
（香港，2025年7月25日）國泰航空近日發現大量會員的帳戶遭到不明人士非法登入，有會員的個人資料被未經授權查閱，更有帳戶內的「亞洲萬里通」里數被盜走。香港網絡安全事故協調中心（HKCERT）提醒市民保持警覺，採取適當保安措施，妥善保護個人密碼，嚴防類似事件發生。
盜取「亞洲萬里通」里數
攻擊者利用互聯網上外洩的會員帳戶密碼，透過系統雙重驗證流程中的漏洞，成功繞過安全防護非法登入用戶帳戶，盜取「亞洲萬里通」里數。據國泰航空確認，此次事件涉及約1,000個會員帳戶，可能影響超過2,000名客戶。外洩的個人資料包括但不限於：
- 基本資料：姓名、性別、出生日期
- 聯絡資訊：電郵地址、手機號碼、通訊地址
- 帳戶資料：里數餘額、積分狀態
雖然攻擊者主要目標是盜取里數，但受害者的個人資訊同樣面臨被濫用的風險。
適當的保安措施
為了更好地保障個人帳戶，HKCERT強烈建議市民立即採取以下三重保安措施：
一、強化密碼管理
- 定期更改會員帳戶密碼，減少密碼外洩的風險。
- 不要重複使用密碼，應為每個帳戶創建一個獨一無二的密碼。
- 使用高強度密碼，其中選擇包含大小寫字母、數字及特殊字符的複雜密碼，避免使用容易猜測的訊息，例如姓名、電話或出生日期。
二、升級帳戶保安設定
- 啟用多重驗證（MFA），例如通過智能手機或電郵接收驗證碼。
- 考慮使用無密碼登入選項，新式認證方法如通行鑰匙（PassKey）、人臉識別或指紋掃描更為安全。
三、慎防釣魚攻擊
如果用戶懷疑自己的社交媒體帳戶已被盜竊，應立即採取以下步驟：
- 切勿與第三方分享個人訊息，避免打開未經驗證的鏈結及附件，對可疑的網站、電郵、連結和附件保持警惕。
- 若懷疑成為釣魚詐騙受害者，應立即更改密碼，通知銀行或服務供應商，並向 HKCERT 報告尋求協助。
- 使用「守網者」（CyberDefender）檢查可疑電郵、網址及IP地址，識別網絡騙局及陷阱，或致電香港警務處反詐騙協調中心「防騙易18222」尋求協助。
服務供應商亦應加強保安措施。今次事故突顯了確保網上帳戶安全的必要性。HKCERT 建議服務供應商採取以下保安措施：
一、用戶驗證
- 強制啟用多重驗證：服務供應商應將多重驗證設為所有帳戶的必須要求，這可有效降低非法登入的可能性。
- 推行無密碼認證：提供通行鑰匙（PassKey）或生物認證等無密碼登入選項，可減少對傳統密碼的依賴，降低憑證外洩的風險。
- 加強驗證流程：測試並確保多重驗證不會被惡意繞過或利用，並使用較高標準的多重驗證，例如動態驗證碼或在敏感操作時的額外身份檢查。
二、系統安全
- 採取深度防禦控制：例如建立可落地的分層防護框架，從用戶帳戶安全、系統架構、數據操作安全以及人員責任强化等多個層次進行部署防護，並定期評估各層的有效性。
- 監控數據外洩：服務供應商應主動監控互聯網上的數據外洩情況，並及時向用戶發出警告或重設賬戶，防止黑客作出進一步攻擊。
- 定期由第三方進行安全審查：定期檢查帳戶系統以識別並修復漏洞，聘請網絡安全專家檢視系統安全並提供改善建議。
三、提升用戶的安全意識
- 公司應提供清晰指引，協助用戶創建高強度密碼、啟用多重驗證及識別釣魚攻擊。
- 定期提醒用戶最新安全或防騙資訊，以及系統的保安功能。
國泰航空事故為用戶及服務供應商敲響了警鐘，提醒我們必須重視帳戶安全。公眾需採取措施保護自己的帳戶，而各機構則需推行嚴格的帳戶安全措施並持續加強系統的安全性，在數碼世界中保護敏感訊息。
- 完 -
FOLLOW US
SUBSCRIBE TO OUR NEWSLETTERS
Share the latest information of HKPC to your inbox