FBI已查获一批用于扫描和网络钓鱼的工具，这些工具被官员称与中国政府有关联的黑客组织使用，该组织负责在美国及海外进行破坏性网络行动，包括针对电力行业、学术界和关键基础设施。
The FBI has seized scanning and phishing tools used by a group of hackers that officials say is associated with the Chinese government and that is responsible for disruptive cyber operations in the United States and abroad, including against the power industry, academia and critical infrastructure.
SAFIYAH RIDDLE, ERIC TUCKER 洛杉矶——FBI已查获一批用于扫描和网络钓鱼的工具，这些工具被官员称与中国政府有关联的黑客组织使用，且该组织负责在美国及海外进行破坏性网络行动，包括针对电力行业、学术界和关键基础设施。
SAFIYAH RIDDLE, ERIC TUCKER LOS ANGELES — The FBI has seized scanning and phishing tools used by a group of hackers that officials say is associated with the Chinese government and responsible for disruptive cyber operations in the United States and abroad, including against the power industry, academia and critical infrastructure.
此次查获工具的行动于周三由FBI和司法部宣布，标志着近年来执法部门针对私营部门称为“Flax Typhoon”的广泛黑客活动的最新努力。
The seizure of the tools, announced Wednesday by the FBI and Justice Department, represents the latest law enforcement effort in recent years to go after a broad-based hacking campaign known to the private sector as Flax Typhoon.
涉及的工具名为“Microscan”和“FishHub”，黑客利用它们对包括美国和外国关键基础设施在内的目标进行扫描、网络钓鱼和入侵。该工具被用于攻击的实体包括美国一家未具名的电力公司、日本和波兰的机场、台湾的大学、一家跨国非政府组织以及台湾的关键基础设施公司。
The tools at issue, called “Microscan” and “FishHub,” were used by the hackers to scan, phish and hack targets that included U.S. and foreign critical infrastructure. The tools were used to target, among other entities, an unnamed power company in the U.S., Japanese and Polish airports, Taiwanese universities, a multinational, nongovernmental organization and Taiwanese critical infrastructure companies.
最新的行动已使这些工具失效，FBI和司法部官员称这对黑客行动是一次重大打击。
The latest operation has rendered the tools inoperable in what FBI and Justice Department officials said was a blow to the hacking operation.
“我们的目标是剥夺威胁行为者的能力。我们打击他们的基础设施、资金和工具，”FBI网络部门副助理局长Jason Bilnoski对美联社表示，并称该黑客行动“毫无选择性且鲁莽”。这些工具由一家总部位于中国的信息安全公司Integrity Technology Group运营，FBI表示该公司与中国政府关系密切，且是Flax Typhoon的真实身份。
“We aim to remove the capability from the threat actors. We target their infrastructure, their money, and their tools,” FBI Cyber Division Deputy Assistant Director Jason Bilnoski told The Associated Press, calling the hacking operation “indiscriminate and reckless.”The tools were operated by a Chinese-based information security company called Integrity Technology Group, which the FBI has said is closely associated with the Chinese government and is the actual identity of Flax Typhoon.
2024年9月，美国联邦调查局（FBI）宣布，其成功摧毁了一个与“Flax Typhoon”相关的僵尸网络。该网络曾在超过20万台消费设备（包括摄像头、录像机以及家庭和办公室的路由器）上安装恶意软件，从而构建了一个庞大的僵尸网络——即由受感染计算机组成的网络。该网络被用于实施网络犯罪，例如从受害者网络中窃取敏感信息。
In September 2024, the FBI announced that it had disrupted a botnet associated with Flax Typhoon that installed malicious software on more than 200,000 consumer devices, including cameras, video recorders and home and office routers, to create a massive botnet — a network of infected computers. The botnet was used to facilitate cyber crimes, such as the theft of sensitive information from victims’ networks. FBI San Diego Supervisory Special Agent Brett Lally said that the department would continue to monitor for ways that the company might rebuild its infrastructure.
FBI圣地亚哥分部的监督特别探员布雷特·拉利表示，该部门将继续监测该公司可能重建基础设施的各种方式。
“It’ll be interesting to see what this round of disruption actions have in terms of their ability to operate as a company in China,” Lally said.
拉利说：“我们很想知道，经过这一轮破坏行动后，该公司是否还能在中国继续运营。”塔克在华盛顿报道。
Tucker reported from Washington.