字号 ·· | 护眼
英国广播公司

联邦调查局遭黑客入侵内幕:数据泄露“危险” 特工们既恐惧又愤怒Inside the FBI hack: Agents fearful and angry after 'dangerous' data breach

点「原文对照」整页切到原文,或双击某段只看那段的原文。

根据盖蒂图片社(Getty Images)的报道:BBC世界服务频道(BBC World Service)的乔·蒂迪(Joe Tidy)报道:目前,多名现任及前任FBI特工向BBC新闻表达了他们的震惊、恐惧与愤怒。此次黑客攻击似乎泄露了FBI全体员工的私人信息。

Anadolu via Getty Images Joe Tidy Cyber correspondent, BBC World Service 57 minutes ago Current and former FBI agents have spoken to BBC News of their shock, fear and anger following a hack that appears to have exposed the private and personal information of the agency's entire workforce. "This is really bad for our undercover agents," says one former FBI agent, who fears for the safety of his colleagues.

“这对我们的卧底特工来说是个极其严重的威胁,”一位前FBI特工表示,他非常担心同事们的安全。

The former cyber investigator is in a group chat with current agents who are worried their personal information could soon be freely available online to criminals and hostile nation-state hackers.

这位前网络安全调查员与现任FBI特工们共同在一个群聊中讨论此事;这些特工担心自己的个人信息很快可能被犯罪分子或敌对国家的黑客公开利用。他们担心自己会成为攻击目标,或者犯罪分子会利用这些数据制造极具说服力的网络钓鱼攻击、诈骗手段,甚至索要贿赂。

He says staff fear they could be targeted, or that criminals could use the data to create highly convincing phishing attempts, scams or demands for bribes. The hacking group ShinyHunters is threatening to publish the stolen databases and documents within four days unless its demands are met.

黑客组织“ShinyHunters”威胁称,如果他们的要求得不到满足,将在四天内公开被盗的数据库和文件。

Some agents are also concerned about the risk of physical attacks from cyber criminals they have investigated.

一些特工还担心,他们曾经调查过的犯罪分子可能会对他们发起物理攻击。

"One of the things we are discussing in the group chat is 'violence-as-a-service' attacks from young online gangs," says the former worker "They could use this information to harass an FBI agent who has worked on their cases." Personal concerns Groups similar to ShinyHunters - believed to be an English-speaking gang - have in the past been linked to swatting incidents, and even petrol bomb attacks against law enforcement officers and rivals.

这位前FBI特工补充道:“我们在群聊中讨论的一个问题是‘暴力服务’(即网络犯罪团伙利用技术手段实施的暴力行为)——这些团伙可能会利用这些信息来骚扰那些曾参与他们案件调查的FBI特工。”

"One of the things we are discussing in the group chat is 'violence-as-a-service' attacks from young online gangs," says the former worker "They could use this information to harass an FBI agent who has worked on their cases." Personal concerns Groups similar to ShinyHunters - believed to be an English-speaking gang - have in the past been linked to swatting incidents, and even petrol bomb attacks against law enforcement officers and rivals.

像“ShinyHunters”这样的网络犯罪团伙过去曾与多起针对执法人员的袭击事件有关,甚至包括使用汽油弹的攻击。该团伙声称自己于周一入侵了FBI的系统,并在其暗网网站上公布了攻击的详细信息。

The group claims it breached FBI systems on Monday and later posted details of the attack on its darknet site. The FBI has not responded to requests for comment.

FBI尚未对相关报道作出回应。不过周三,FBI承认了此次数据泄露事件,并表示正在“积极调查”其发生原因。

However, on Wednesday the agency acknowledged the breach - saying it was "aggressively investigating" how it occurred.

对于现任网络安全公司ReliaQuest的安全运营高级副总裁迈克尔·麦克弗森(Michael McPherson)来说,这次黑客攻击“对特工的安全构成了严重威胁,尤其是他们的家人”。他说,探员们了解这份工作带来的“固有风险”。

For Michael McPherson, a former FBI agent who is now senior vice president of security operations at cyber firm ReliaQuest, the hack presents "a security threat which cuts to the core of agent safety, particularly their families". He says agents understand the "inherent risks" that come with the job.

“但据报道,此次事件涉及家庭住址和联系方式等个人数据,这可能会让通常与这类职业相关威胁隔绝的家庭成员暴露在危险中,”麦克弗森说。

"But this incident reportedly includes personal data such as home addresses and contact information, which could expose family members who are normally insulated from the threats associated with such a career," McPherson says. ShinyHunters shared samples of the alleged stolen data with reporters, along with an extortion demand.

ShinyHunters 向记者分享了所谓被盗数据的样本,并提出了勒索要求。

The samples appear genuine and include names, addresses, phone numbers, badge numbers, job titles and information about spouses.

这些样本看起来是真实的,包含姓名、地址、电话号码、警徽号码、职位名称以及配偶信息。记录似乎涉及数千名探员,包括副局长等高级官员。罪犯似乎还掌握了数千名特工的高度敏感医疗信息。

The records appear to relate to thousands of agents, including senior officials such as deputy directors. The criminals also appear to possess highly sensitive medical information relating to thousands of special agents.

BBC 新闻看到了被盗的“胜任工作能力”体检样本,其中包含血液和尿液检测结果,以及医生备注中提到的“贝类和香蕉过敏”等病症。

BBC News has seen samples of stolen "fitness-for-work" medical examinations containing information such as blood and urine test results along with doctors' notes mentioning conditions including a "shellfish and banana allergy".

探员的全名和住址,以及“尿血”和“高胆固醇”等医疗问题记录,现已落入罪犯手中。

BBC News has seen samples of stolen "fitness-for-work" medical examinations containing information such as blood and urine test results along with doctors' notes mentioning conditions including a "shellfish and banana allergy".

曾任联邦调查局网络副助理局长、现领导 Halcyon 研究中心的辛西娅·凯撒表示,ShinyHunters 似乎已经失去了对部分数据的控制,这些数据正在各个网络研究人员的在线群组中流传,甚至在主要数据批次发布前就可能造成伤害。

Agents' full names and addresses, as well as references to medical issues including "blood in the urine" and "high cholesterol" are now in the criminals' hands. Cynthia Kaiser, who was the Deputy Director of Cyber at the FBI and now leads the Research Centre at Halcyon says ShinyHunters appear to already have lost control of some of the data which is circulating in various online groups of cyber researchers and could lead to harm even before the main tranche is published.

“很多损害可能已经造成,正如我们在过去联邦调查局数据泄露事件中所见,这些信息多年后仍在暗网流传,”她说。

Cynthia Kaiser, who was the Deputy Director of Cyber at the FBI and now leads the Research Centre at Halcyon says ShinyHunters appear to already have lost control of some of the data which is circulating in various online groups of cyber researchers and could lead to harm even before the main tranche is published.

人们还担心此次泄露的国家安全影响,例如工作人员可能成为敌对外国情报机构招募的目标。

"A lot of the damage may already be done, and as we have seen in past FBI data breaches, that information continues to circulate the dark web years later," she said.

后果担忧 除了恐惧,许多接受 BBC 采访的人对联邦调查局允许数据被盗表示愤怒。

There are also concerns about the breach's national security implications, such as staff becoming targets for recruitment efforts by hostile foreign intelligence services.

从技术角度来看,这次黑客攻击尤其令人尴尬,因为 ShinyHunters 并不是一个被认为技术非常高明的黑客组织。

Fallout fears Alongside fear, many of those who spoke to the BBC expressed anger at the FBI for allowing the data to be stolen.

一位前网络调查员表示,FBI 的工作人员对导致此次攻击的“安全漏洞(这些漏洞显然是由于疏忽和懒惰造成的)”感到非常愤怒。

The hack is particularly embarrassing from a technical perspective because ShinyHunters is not generally regarded as a highly sophisticated hacking group.

如果相关数据真的像威胁中那样在下周被公开,人们还不知道该如何应对这一后果。

One former cyber agent said FBI staff were furious about the "sloppy and lazy security failures" that allegedly enabled the breach.

FBI 很可能不会屈服于黑客的勒索要求,而黑客们也表示他们打算将这些信息发布在自己的暗网网站上。

There is also confusion about how to handle any fallout if data is published next week, as threatened.

不同寻常的是,这个黑客组织并没有索要金钱,而是要求 FBI 撤回他们在 5 月份发布的一则警告声明——他们认为该声明“冒犯了”他们。这位前网络调查员告诉我:“FBI 的领导层完全不知所措。”

The FBI appears unlikely to comply with the extortion demands, and the hackers have indicated they intend to post the information on their darknet site. Unusually, the group is not demanding money. Instead, it wants the FBI to retract an advisory published in May, which it claims "offended" them.

他还表示,FBI 已要求工作人员注册一个名为 DeleteMe 的服务,该服务可以帮助从数据交易网站上删除个人信息,但他认为这种应对措施并不够有效。

"The agency leadership is lost," the former cyber investigator tells me. He says staff have been advised to sign up to a service called DeleteMe, which helps remove personal information from data broker websites - a response he feels is inadequate.

这次黑客攻击可能会给 FBI 局长 Kash Patel 带来更多麻烦,因为他的领导能力早已受到质疑。

The hack may raise further questions for FBI director Kash Patel, whose leadership has already faced scrutiny According to another former agent, there is widespread shock that such a breach could happen at one of the world's best-resourced law enforcement agencies.

另一位前特工指出,人们普遍对这样一起发生在全球资源最丰富的执法机构之一的事件感到震惊:“你可能会认为这些信息根本不应该被公开……其实这真的很令人不安。”

The hack may raise further questions for FBI director Kash Patel, whose leadership has already faced scrutiny According to another former agent, there is widespread shock that such a breach could happen at one of the world's best-resourced law enforcement agencies. "You would think this information would not be internet-exposed. It's disturbing, actually," he says.

此外,还有一个令人尴尬的事实:这个由年轻网络犯罪分子组成的团伙屡次成功逃避执法部门的追捕,同时还实施了一系列备受关注的黑客攻击。

'Kicked a sleeping lion' There is also embarrassment that a prolific group of young cyber criminals has repeatedly managed to evade law enforcement while carrying out a string of high-profile hacks.

ShinyHunters 与多起勒索事件有关,包括针对 Rockstar Games 和 Canvas 教育平台的攻击;该团伙经常通过 Telegram 与记者联系,并在平台上炫耀自己的犯罪行为。

ShinyHunters has been linked to numerous extortion attacks, including on Rockstar Games and the education platform Canvas The group regularly communicates with reporters via Telegram, where members often boast about their activities.

一位前特工说:“FBI 对这些青少年网络犯罪分子根本不知该如何应对。”McPherson 表示,FBI 当然非常重视这起事件。

"The bureau doesn't know what to do with teenage cyber criminals," one former agent says. McPherson says there is no doubt the FBI is taking the incident extremely seriously.

他预计该机构将利用其广泛的合作伙伴网络和资源,“让这个团伙为这种厚颜无耻且挑衅性的攻击承担后果”。

He expects the agency to draw on its extensive network of partners and resources "to make this group suffer the consequences for this brazen and taunting attack".

凯撒补充说,这些黑客“鲁莽且愚蠢”,并警告他们将面临“联邦调查局(FBI)为迅速将其绳之以法而付出的重大努力”。

Kaiser added that the hackers have been "reckless and foolish" and warned them to expect "a significant effort by the FBI to quickly bring them to justice."