越南不信任中国?竟派黑客攻击武汉官方邮箱,只为窃取疫情数据?
2021-01-28
LONDON/WASHINGTON, April 22 (Reuters) - 轻变传奇私服 working in support of the Vietnamese government have attempted to break into Chinese state organisations at the centre of Beijing's effort to contain the coronavirus outbreak, U.S. cybersecurity firm FireEye said on Wednesday.
伦敦/华盛顿,4月22日 (路透社)消息——美国网络安全公司“火眼”周三表示,支持越南政府的黑客试图侵入处于北京遏制冠状病毒爆发努力中心的中国国家组织。
FireEye said a hacking group known as APT32 had tried to compromise the personal and professional email accounts of staff at China's Ministry of Emergency Management and the government of Wuhan, the Chinese city at the centre of the global coronavirus pandemic.
火眼公司表示,一个名为APT32的黑客组织曾试图侵入中国应急管理部和武汉市政府工作人员的个人和专业电子邮件账户。武汉是全球冠状病毒大流行的中心城市。
Investigators at FireEye and other cybersecurity firms have said they believe APT32 operates on behalf of the Vietnamese government.The group's recent activity mirrors attempts by a host of state-backed hackers to compromise governments, businesses and health agencies in search of information about the new disease and attempts to combat it.
火眼公司和其他网络安全公司的调查人员表示,他们认为APT32代表越南政府运作。该组织最近的活动反映了一系列国家支持的黑客试图危害政府、企业和卫生机构,以搜索有关这种新疾病的信息,并试图与之抗争。
"These attacks speak to the virus being an intelligence priority - everyone is throwing everything they've got at it, and APT32 is what Vietnam has," said Ben Read, senior manager for analysis at FireEye's Mandiant threat intelligence unit.
“这些攻击表明,该病毒是一个情报优先事项——每个人都在竭尽全力,而越南拥有的就是APT32。”火眼公司的Mandiant威胁情报部门负责分析的高级经理本·里德表示。
The Vietnamese government did not respond to a request for comment.Messages sent to email addresses used by the hackers went unanswered.
越南政府没有回复记者的置评请求。发送到黑客使用的电子邮件地址的消息无人回复。
The Cyberspace Administration of China (CAC), the Chinese Ministry of Emergency Management and the Wuhan city government did not immediately respond to faxed requests for comment.
中国网信办(CAC)、中国应急管理部和武汉市政府没有立即回复传真的置评请求。
Vietnam was quick to react to first reports of the new coronavirus, sealing off its border with neighbouring China and implementing an aggressive programme of contact tracing and quarantine measures that have kept cases of infection in the country below 300.
越南对新冠状病毒的首批报告反应迅速,封锁了与邻国中国的边境,并实施了积极的接触者追踪和检疫措施,将该国的感染病例控制在300例以下。
EXISTENTIAL THREAT
事关生死存亡的威胁
Adam Segal, a cybersecurity expert at the Council on Foreign Relations in New York, said the hacking activity suggested Hanoi also took swift action in cyberspace.The earliest hacking attempt identified by FireEye predated the first known international infection by a week, he said.
纽约外交关系委员会的网络安全专家亚当·西格尔表示,黑客活动表明河内也在网络空间迅速采取了行动。他说,火眼公司发现的最早的黑客企图比第一次已知的国际感染早了一周。
"It shows both a distrust about Chinese government announcements and a sense that when China sneezes, it is its neighbours that get the flu – in this case literally."
“这既表明了对中国政府声明的不信任,也表明了一种感觉,即‘当中国打喷嚏时,它的邻国感染流感’——这么说并不夸张。”
FireEye said APT32 targeted a small group of people with emails that included tracking links to notify the hackers when they were opened.The attackers then planned to send further emails with malicious attachments containing a virus called METALJACK that would give them illicit access to their victims' computers.
火眼公司表示,APT32的目标是一小部分人,他们的电子邮件包括跟踪链接,以便在打开电子邮件时通知黑客。然后,攻击者计划进一步发送带有恶意附件的电子邮件,其中包含一种名为METALJACK的病毒,这将使他们能够非法访问受害者的计算机。
Marc-tienne Léveillé, a researcher at Slovakia-based software security firm ESET, said APT32 had used the same malware in recent months to target other governments and commercial organisations in east Asia, as well as political activists and dissidents in Vietnam.
斯洛伐克软件安全公司ESET的研究员马克-埃蒂安·莱韦莱表示,APT32近几个月来曾使用同样的恶意软件攻击东亚其他国家的政府和商业组织,以及越南的政治活动人士和持不同政见者。
It is unclear if the intrusion attempts in China were successful but the attacks show that hackers ranging from cyber criminals to state-backed spies have had to quickly reorganise their operations in response to the coronavirus, said John Hultquist, senior director of analysis at Mandiant.
Mandiant高级分析总监约翰·胡尔特奎斯特表示,目前尚不清楚在中国的入侵企图是否成功,但这些攻击表明,,从网络罪犯到有政府背景的间谍,黑客们不得不迅速重组行动,以应对冠状病毒。
"This is precisely what we would expect. A crisis develops and there's a shortage of information, so intelligence collectors are deployed," he said.
他说:“这正是我们所预期的。危机发展,信息短缺,因此部署了情报收集者。”
"This crisis is of such an extreme interest to every country on earth that it surpasses the intelligence necessities normally associated with armed conflict. It is absolutely existential."