臭名昭著的全球黑客团伙ShinyHunters的一名涉嫌头目在荷兰被捕。此前,美国联邦调查局(FBI)与荷兰当局开展联合行动,打击了一个与美国及全球各地多起备受瞩目的攻击事件有关的网络犯罪网络。
An alleged leader of the notorious global hacking syndicate ShinyHunters has been arrested in the Netherlands following a joint operation between the FBI and Dutch authorities, targeting a cybercrime network linked to high-profile attacks across the U.S. and worldwide.
荷兰警方宣布,于9月15日逮捕了一名来自阿姆斯特丹的24岁男子,他涉嫌在ShinyHunters黑客集团中扮演角色并企图煽动两起谋杀。当局指出,随着对缴获的电子设备的调查,不排除未来会有更多人被捕。
Dutch police announced the arrest of a 24-year-old Amsterdam man Sept. 15 for his alleged role in the ShinyHunters hacking group and for attempting to incite two murders, with authorities noting that further arrests remain possible as they investigate seized electronic devices.
“今天上午,@FBI与我们的合作伙伴荷兰国家警察局宣布逮捕了ShinyHunters的涉嫌头目之一——这是一个全球网络犯罪和威胁行为者集团,与美国、荷兰以及世界各地的网络攻击有关,”FBI局长卡什·帕特尔(Kash Patel)于周二上午在题为《FBI结束针对掠夺美国人的全球网络的网络犯罪行动》的文章中写道。“在FBI调查人员的协调下,荷兰高科技犯罪部根据荷兰法律逮捕了嫌疑人。此时此刻,FBI团队正积极与合作伙伴合作,根据此次逮捕行动获取并追查更多线索,以推进正在进行的调查。”
"This morning @FBI and our partners the Dutch National Police are announcing the arrest of one of the alleged leaders of ShinyHunters – a global cybercrime and threat actor group linked to cyberattacks in the United States, the Netherlands, and around the world," FBI Director Kash Patel wrote Tuesday morning on FBI WRAPS UP CYBERCRIME OPERATION TARGETING GLOBAL NETWORKS PREYING ON AMERICANS "In coordination with FBI investigators the Dutch High-Tech Crime Unit arrested the suspect under Dutch law. As we speak FBI teams are actively working with partners to obtain and execute more leads in the ongoing investigation based on this arrest.
“感谢我们的荷兰国家警察合作伙伴在此案中与我们持续合作,同时也感谢那些向我们提供信息的行业合作伙伴。调查仍在进行中。”
"Thank you to our Dutch National Police partners for their continued work with us in this case and the industry partners who shared information with us. The investigation continues."
根据荷兰警方的声明,该男子还涉嫌企图煽动他人实施两起谋杀案。警方已扣押了多种数据存储设备,并正在进一步调查这些设备;不排除会有更多人被逮捕的可能性。
"The man is also suspected of attempted incitement to commit two murders," according to a Dutch police release. "Various data carriers have been seized and are being investigated further. Further arrests are not ruled out."
FBI网络部门副主任布雷特·莱瑟曼(Brett Leatherman)公开向黑客组织“ShinyHunters”发表讲话,警告这些网络犯罪分子:“我们知道如何找到你们。”莱瑟曼在视频声明中继续说道:“‘ShinyHunters’的剩余成员们:你们应该已经听说了你们的同伙被捕的消息。我相信在最近几天里,你们一定看到了或听到了一些公众尚未知晓的事情。”
Brett Leatherman, assistant director of the FBI's Cyber Division, made an unusually public address to the hacking group ShinyHunters, telling the cybercriminals that "we know how to find you." "To the remaining members of ShinyHunters: You've heard about the arrest of your colleague," Leatherman's video statement warned. "We're confident you've seen or heard things in recent days that the public has not.
“有些组织曾以为自己的匿名身份或朋友能够保护他们,但他们错了。逮捕行动会改变那些愿意配合调查的人的态度;而被扣押的基础设施也会让我们看清到底还有谁还在继续参与这些犯罪活动。”
"Other groups believed anonymity or their friends would protect them, and they were wrong. Arrests have a way of changing who is willing to talk.
“你们在这个犯罪集团中待得越久,我们对你们的了解就越多。你们知道如何找到我们,我们也知道如何找到你们。我建议你们在还有选择的时候主动与我们联系。”总部位于阿姆斯特丹的网络安全公司Neo Security的本杰明·科珀(Benjamin Korper)指出,被捕的男子名叫佩潘·范德斯塔普(Pepijn van der Stap),他是该公司负责网络安全防护工作的负责人。
And seized infrastructure has a way of showing us who's left. "The longer you stay in this, the more we learn about you. You know how to find us and we know how find you. I suggest you reach out first while the choice is still yours." Benjamin Korper of Amsterdam-based cybersecurity company Neo Security named the arrested man as Pepijn van der Stap, the company's offensive security lead.
美国联邦调查局引渡被控窃取新冠研究资料的华人黑客“自去年以来,这名网络犯罪分子及其同谋据称已侵入140多个机构,并骗取至少7000万美元的勒索款,”利瑟曼在一段未点名嫌疑人的视频声明中表示,“他们经常把第三方供应商和云平台作为目标,窃取敏感数据,并以公开这些数据相威胁,勒索受害者。”科珀在接受路透社电话采访时说,9月15日晚,即范德斯塔普在一场动用闪光弹的警方突袭中被捕当晚,荷兰法证调查人员到访了他的办公室。
FBI EXTRADITES CHINESE HACKER ACCUSED OF STEALING COVID-19 RESEARCH "Since last year, this cyber criminal and his co-conspirators have allegedly breached more than 140 organizations and taken at least $70 million in extortion payments," Leatherman said in his video statement, which did not name the suspect. "They often target third-party vendors and cloud-based platforms, stealing sensitive data in extorting victims with threats to publish it." In a telephone interview with Reuters, Korper said Dutch forensic investigators visited his office Sept. 15, the night Van der Stap was arrested in a dramatic police raid that involved flash bang grenades.
据路透社报道,ShinyHunters是一个以大规模数据泄露和勒索闻名的黑客组织。该组织此前宣布 recently 窃取了其所称的数TB美国联邦调查局服务器敏感人事数据,其中包括员工承担的情报任务和医疗记录。
ShinyHunters is a hacking group known for large-scale data breaches and extortion and had announced its recent theft of what it said was terabytes of sensitive personnel data from U.S. FBI servers, including intelligence assignments and medical records of employees, according to Reuters.
一份发给工作人员的内部备忘录称,该局正在基于这样的推定展开调查:黑客窃取了与全局所有员工有关的数据。一名消息人士告诉路透社。
An internal memo circulated to staffers said the FBI was operating under the presumption that hackers stole data pertaining to all bureau employees, a source told Reuters.
美国联邦调查局称其招聘门户遭入侵的源头仍不清楚,黑客却声称员工数据已遭泄露ShinyHunters在一份声明中表示,范德斯塔普与该组织“没有任何关联”,并称荷兰警方无能。范德斯塔普被捕的消息在网络安全界引发热议。
FBI SAYS SOURCE OF ITS JOBS PORTAL BREACH STILL UNKNOWN AS HACKERS ALLEGE EMPLOYEE DATA COMPROMISED In a statement, ShinyHunters said Van der Stap had "no association" with the group and that Dutch police were incompetent. News of Van der Stap's arrest caused a stir in the cybersecurity community.
范德斯塔普于2023年因数据盗窃和勒索被判刑,此事以及他后来公开否认网络犯罪的做法均已得到广泛报道。范德斯塔普在其个人网站上承认,自己走过的路“并非一条直线”,但他说,自己的经历让他明白,“知识应用于建设与保护,而不是破坏。”科珀说,在雇用范德斯塔普前,他曾对其进行严格审查,并在其任职期间对其进行监督;范德斯塔普被捕令他深感震惊。
Van der Stap's 2023 convictions of data theft and extortion had already received widespread publicity, as did his subsequent public disavowal of cybercrime. On his personal website, Van der Stap acknowledged his journey "hasn't been a straight line" but said his experience had taught him that "knowledge is for building and protecting, not breaking." Korper said he had carefully vetted Van der Stap before hiring him, monitored him during his employment, and was shocked by the arrest.
“我真心认为,人们应该获得第二次机会,但这一次,我的善意并没有得到感谢。”科珀说。“我谈过的每一个人都感到震惊不已。”这名高管表示,他已聘请一家外部公司调查范德斯塔普是否侵入了Neo Security或其客户,但截至目前,调查人员没有发现任何证据表明他对雇主或客户采取了不利行动。科珀说,自从范德斯塔普被捕后,两人一直没有联系。
"I truly believe that people deserve a second chance, but in this case I was not thanked for it," Korper said. "Absolutely everybody I talked to is flabbergasted." The executive said he had hired an outside firm to investigate whether Van der Stap had hacked Neo Security or its customers, but so far investigators have found no evidence that he acted against his employer or its clients. Korper and Van der Stap have not been in touch since the arrest, Korper said.