
加拿大网络安全专家爱德华·杜布罗夫斯基(Edward Dubrovsky)本月初在美联邦法院被控敲诈勒索共谋罪和“以威胁手段干涉商业”,根据公开案卷显示。(Ed Dubrovsky/LinkedIn)据美国检方称,一名多伦多地区的网络安全高管在一起备受关注的黑客调查中被联邦调查局(FBI)逮捕,他勾结网络犯罪分子,向自己的客户勒索钱财。
Canadian cybersecurity expert Edward Dubrovsky was charged earlier this month in a U.S. federal court with an extortion conspiracy offence and "interference with commerce by threats," according to a public docket. (Ed Dubrovsky/LinkedIn) A Toronto-area cybersecurity executive arrested by the FBI amid a high-profile hacking probe colluded with cybercriminals to extort money from his own clients, according to U.S. prosecutors.
美国法院披露的惊人指控更清楚地表明,爱德华·杜布罗夫斯基涉嫌与臭名昭著的“ShinyHunters”黑客组织相关的“威胁行为者”有牵连。
The explosive allegations laid out in a U.S. court provide a clearer indication of how Edward Dubrovsky is suspected of being involved with "threat actors" linked to the notorious ShinyHunters cyber-gang.
“ShinyHunters”上个月声称对入侵FBI招聘门户网站并窃取大量数据负责。该组织通常要求支付赎金,以换取不发布其获取的敏感数据。
ShinyHunters claimed responsibility last month for hacking an FBI jobs portal and stealing a massive trove of data. The group typically demands ransom payments in exchange for not releasing the sensitive data it's obtained.
据加拿大广播公司(CBC)获得的法庭记录显示,助理美国检察官安东尼·卡里西米(Anthony Carissimi)于10月8日在费城联邦治安法官面前称:“被告实际上是在为威胁行为者工作。”
"The defendant was actually working on behalf of the threat actors," assistant U.S. attorney Anthony Carissimi claimed before a federal magistrate judge in Philadelphia on Oct. 8, according to a court transcript obtained by CBC News.
这位联邦检察官补充道:“考虑到这些指控以及他被捕的原因,我怀疑他的生意会枯竭。”杜布罗夫斯基的法庭指定辩护律师表示,他将对指控提出抗辩。
"Given that those are the charges and that is what he's been arrested for, I suspect that his business will dry up," the federal prosecutor added. Dubrovsky will contest the charges, his court-appointed defence said.
FBI逮捕涉“ShinyHunters”黑客案加拿大网络安全专家 引发震惊与意外现年54岁的杜布罗夫斯基本月初在前往费城参加网络安全会议期间被拘留。根据公开案卷,他被控敲诈勒索共谋罪和“以威胁手段干涉商业”。
Shock and surprise after FBI arrests Canadian cybersecurity expert in ShinyHunters hacking case Dubrovsky, 54, was detained earlier this month during a trip to Philadelphia for a cybersecurity conference. He was charged with an extortion conspiracy offence and "interference with commerce by threats," according to a public docket.
当时,FBI局长卡什·帕特尔(Kash Patel)表示,该机构逮捕了一名“ShinyHunters”的“涉嫌共谋者”。加拿大皇家骑警(RCMP)表示,知悉有一名加拿大人因涉及该案被捕。
At the time, FBI director Kash Patel said the agency had arrested a "suspected co-conspirator" of ShinyHunters. The RCMP said it was aware a Canadian had been arrested in connection with the case.
FBI局长卡什·帕特尔于10月9日证实,该局近日“逮捕了另一名‘闪亮猎手’组织的疑似共谋者”,这个臭名昭著的网络犯罪团伙与针对FBI招聘门户网站的黑客攻击有关。(Kylie Cooper/路透社)在杜布罗夫斯基在美国联邦地区法院举行的为期14分钟的首次聆讯中,联邦检察官简要概述了针对这名加拿大人的指控。他并未直接提及“闪亮猎手”或FBI遭受的网络攻击。
FBI director Kash Patel confirmed on Oct. 9 the agency had in recent days 'arrested another suspected co-conspirator of the ShinyHunters group,' the notorious cyber-gang linked to a hack targeting an FBI jobs portal. (Kylie Cooper/Reuters) During Dubrovsky's 14-minute initial hearing in U.S. District Court, the federal prosecutor provided a brief overview of the case against the Canadian. He did not directly reference ShinyHunters or the FBI cyberattack.

卡里西米表示:“[杜布罗夫斯基]坐在这里的原因是,他从事的本质上是一场针对自己客户、自己商业伙伴的欺诈。”
"The reason [Dubrovsky] is sitting here is because he was engaging in essentially a fraud involving his own clients, his own business partners," Carissimi said.
他说,杜布罗夫斯基“显然在与犯罪分子等人进行加密货币交易”。
He said Dubrovsky was "clearly engaged in cryptocurrency exchanges with, among other people, a criminal element."
卡里西米告诉法庭,杜布罗夫斯基一直在交易门罗币,检察官称这种加密货币“以难以追踪而闻名”。他告诉法庭,虽然杜布罗夫斯基持有加拿大护照,但他原籍拉脱维亚,曾一度也持有以色列护照。
Carissimi told the court that Dubrovsky had been dealing in the cryptocurrency Monero, which the prosecutor said is "renowned for being untraceable." He told the court that, while Dubrovsky has a Canadian passport, he's originally from Latvia and at one point also held an Israeli passport.
法庭指派的联邦辩护律师蒂姆·赖特将针对杜布罗夫斯基的指控描述为“完全未经审查”。
Tim Wright, a court-appointed federal defender, described the allegations against Dubrovsky as "completely untested."
赖特说:“他想抗争到底以洗清冤屈,因为他的名誉,因为他是一名商人。”
"He wants to fight this to clear his name because of his reputation, because he's a businessman," Wright said.
总部位于多伦多的科技公司CyberSteward分享了爱德华·杜布罗夫斯基于10月6日在费城举行的NetDiligence大会上为其新书《网络勒索:战略应对》签名的照片。(CyberSteward/领英)自称“全球公认”专家在领英个人资料中,杜布罗夫斯基将自己描述为“全球公认的网络安全专家”,帮助客户与勒索软件攻击者谈判。他最近出版了《网络勒索:战略应对》一书,旨在为受害企业提供指导。
Canadian firm CyberSteward shared this picture of Edward Dubrovsky signing copies of his book Cyber Extortion: Strategic Response at the NetDiligence conference in Philadelphia on Oct. 6. (CyberSteward/LinkedIn) Self-described 'globally recognized' expert On his LinkedIn profile, Dubrovsky describes himself as a "globally recognized cybersecurity expert" who helps clients negotiate with ransomware attackers. He recently published the book Cyber Extortion: Strategic Response , intended for victimized companies.

在被捕前一天,总部位于多伦多的科技公司CyberSteward发布了一张杜布罗夫斯基在费城NetDiligence大会上为新书签名的照片。
The day before his arrest, Toronto-based tech firm CyberSteward posted a picture of Dubrovsky signing copies of his new book at the NetDiligence conference in Philadelphia.
NetDiligence全球活动与项目总监希瑟·奥斯本在给CBC新闻的电子邮件中表示,“据我们所知”,杜布罗夫斯基的被捕“并未发生在我们的活动现场,该活动于10月7日上午11:30结束。”
Heather Osborne, NetDiligence's director of global events and programming, told CBC News in an email that "to our knowledge," Dubrovsky's arrest "did not occur at our event, which ended at 11:30 a.m. on Oct 7."
CyberSteward未回应多次关于该公司与杜布罗夫斯基关系及其雇佣状况的置评请求。
CyberSteward has not responded to multiple requests for comment on the firm's ties to Dubrovsky, and his employment status.
辩护律师赖特在法庭上表示,杜布罗夫斯基原计划于10月15日在加拿大参加另一场会议,随后返回美国出席南卡罗来纳州的一场活动。“他是网络安全领域非常知名且备受尊敬的商人,”赖特说。
Wright, the defence lawyer, said in court that Dubrovsky had planned to attend another conference in Canada on Oct. 15, then return to the U.S. for an event in South Carolina. "He is a very well known and well respected businessman in cybersecurity," Wright said.
FBI的刑事起诉书仍处于保密状态。该文件通常包含调查机关对被告调查的进一步细节及涉嫌罪行的具体情况。
The FBI's criminal complaint remains under seal. The document would typically contain further details of the agency's investigation into a defendant and specifics of any alleged offence.
美国联邦治安法官斯科特·W·里德下令羁押杜布罗夫斯基,直至其被押解至德克萨斯州——指控在此提出,且他将在那里出席正式羁押听证会。
U.S. Magistrate Judge Scott W. Reid ordered Dubrovsky held in custody until he is transported to Texas, where the charges were filed and where he will appear for a formal detention hearing.
截至周五,美国联邦监狱局的公开记录显示,杜布罗夫斯基仍被关押在10月7日被送往的费城拘留中心。加拿大勒索软件谈判专家因涉FBI黑客案被捕10月12日 | 时长 1:57 加拿大网络安全高管爱德华·杜布罗夫斯基在宾夕法尼亚州被捕,当局正在调查一个声称窃取了FBI员工信息的黑客组织。杜布罗夫斯基的工作是与勒索软件黑客进行谈判。杜布罗夫斯基曾对CBC表示“每个系统”都脆弱杜布罗夫斯基曾任CYPFER董事总经理,该公司受聘协助安大略省汉密尔顿市从2024年的网络攻击中恢复。
As of Friday, public records from the U.S. Federal Bureau of Prisons showed Dubrovsky was still being held at the Philadelphia detention centre where he was taken on Oct. 7. Canadian ransomware negotiator arrested in connection to FBI hacking case October 12|Duration 1:57Edward Dubrovsky, a Canadian cybersecurity executive who negotiates with ransomware hackers has been arrested in Pennsylvania as authorities investigate a hacking group that claims to have stolen FBI employee information. 'Every system' is vulnerable, Dubrovsky once told CBC Dubrovsky previously served as managing director at CYPFER, the firm tasked with helping the city of Hamilton, Ont., recover from a 2024 cyberattack.
该公司近期告诉CBC新闻,杜布罗夫斯基未参与汉密尔顿市的案件处理。
The company recently told CBC News that Dubrovsky wasn't involved in the Hamilton file.
受汉密尔顿市聘请的网络安全公司称:被FBI逮捕的董事未参与该市勒索软件应对工作曾受聘担任约克大学网络安全讲师的他,曾以评论员身份出现在加拿大媒体上探讨相关议题,并曾接受加拿大广播公司(CBC)新闻采访。
Cybersecurity firm hired by Hamilton says director arrested by FBI didn't handle city's ransomware response Once hired as a York University cybersecurity instructor, he appeared in Canadian media as a commentator on related issues and was previously interviewed by CBC News.
杜布罗夫斯基在2018年表示:“每个组织都会使用供应商和服务提供商来开展部分业务,因此世界上每一个系统都存在漏洞。”
"Every organization uses vendors and service providers to do some of their business," Dubrovsky said in 2018, "so every single system in the world has vulnerabilities."
总部位于弗雷德里克顿的博赛隆安全公司首席执行官大卫·希普利本月早些时候在接受CBC新闻采访时表示,杜布罗夫斯基的案例凸显了他长期以来对勒索软件谈判人员的顾虑。希普利回忆道:“我们以前见过有人失宠。”
David Shipley, CEO of the Fredericton-based firm Beauceron Security, told CBC News in an interview earlier this month that Dubrovsky's case highlights his own longstanding reservations surrounding ransomware negotiators. "We have seen people fall from grace before," Shipley recalled.
他敦促已备份数据的勒索软件受害者寻求恢复未受感染的文件,而不是支付赎金。他说:“支付赎金给攻击者并不能保证让你摆脱困境。”
He urged ransomware victims who have backed up their data to seek to restore uninfected files, rather than paying a ransom. "There's no guarantee that paying [the attackers] gets you out of the pain," he said.
如果您有与此新闻相关的线索,请通过电子邮件联系CBC新闻资深记者托马斯·戴格尔:thomas.daigle@cbc.ca。
If you have a news tip related to this story, contact CBC News senior reporter Thomas Daigle by email: thomas.daigle@cbc.ca .