对德国最知名的极右翼政党德国选择党（AfD）的网络攻击泄露了数十万封机密电子邮件和附件，以及超过34.5万个独立电子邮件地址。在德国选择党上周正式披露了9月对其托管服务提供商的攻击后，Have I Been Pwned网站今天首次证实了此次泄露的规模。德国选择党在声明中表示，“只有少数电子邮件账户被非法复制”，但承认大量数据被从这些账户中窃取，导致了大范围的数据泄露。
The cyberattack on Alternative for Germany (AfD), the country’s most prominent far-right political party, exposed hundreds of thousands of confidential emails and attachments, as well as more than 345,000 unique email addresses. Have I Been Pwned confirmed the scale of the breach for the first time today, after AfD officially disclosed the September attack on its hosting provider last week. AfD said in its statement that “only a few email accounts were illegally copied,” but admitted a large amount of the data was taken from them, resulting in an extensive data breach.
这些电子邮件被添加到了该党所称的“一个活动人士网站”上，该网站将邮件链汇总为可搜索的主题，并导致了各种爆料被公开，例如该党联合领导人对其同事“存在严重问题”的种族言论的看法。根据调查记者莉莉丝·维特曼的一份报告，该报告引用了与实施黑客攻击和泄露的网络犯罪分子以及党内消息人士的对话，称攻击首次被发现是在9月9日，始于一个保护不善的WordPress网站被攻破。
The emails were added to what the party described as “an activist website,” which summarised the email chains into searchable topics and has led to the publication of various revelations, such as a party co-leader’s opinions on colleagues’ “deeply problematic” racial discourse.
同一份报告声称，犯罪分子获得了对托管服务提供商所运营服务器的持续访问权限，该提供商被确认为德国选择党所有的Alternita Dienstleistungs GmbH公司，并窃取了超过1TB的数据。尚无官方消息来源证实黑客关于攻击如何展开的说法。已联系Alternita Dienstleistungs公司寻求其回应。德国选择党表示，受影响电子邮件账户的所有者已收到通知，并已向安全当局报告了此次攻击。
Per a report from investigative journalist Lilith Wittmann, citing conversations with the cybercriminals responsible for the hack-and-leak job and party sources, the attack was first spotted on September 9 and started with a compromise of a poorly protected WordPress site.
“我们对所发生的事情深感担忧，”该党在10月20日的声明中表示。“这种数字攻击是非法的，属于犯罪行为。此外，这是对德国政党体系的攻击，因而也是对民主的攻击。”“我们极为担心的是，被盗文件的内容显然是用非常简陋的人工智能进行分析的。”
The same report claimed the criminals gained persistent access to the servers operated by the hosting provider, identified as AfD-owned Alternita Dienstleistungs GmbH, and exfiltrated more than a terabyte of data. No official sources have verified the hackers’ claims about how the attack unfolded.
本分析聚焦于关键词，而非上下文。迄今为止公布的所谓丑闻经不起审查——值得庆幸的是，这一点正被越来越多的社交媒体评论员所证实。”在“激进分子网站”编撰的 AI 生成摘要中，出现了据称表达大屠杀否认、种族主义和反犹言论、9/11 灾难、伪造文件等内容的链条。《明镜》梳理了原始文件后报道，党领袖爱丽丝·魏德尔似乎在她此前声称知情的数周前，就已了解与 2017 年联邦选举有关的非法捐款。
The contacted Alternita Dienstleistungs for its take. AfD said the owners of the affected email accounts have been notified, and that it reported the attack to security authorities. “We are deeply concerned by what has happened,” the party said in an October 20 statement.
德国选择党（AfD）的立场是，这些邮件的 AI 摘要不可信，但该党并未对可通过种子下载的原始邮件文件的真实性作出具体评论。该党未立即回应我们的置评请求，但此前已对记者表示，不会就这些邮件或基于它们撰写的报道是否可信作出评论。®
“Such a digital attack is illegal and a criminal offense. Furthermore, it is an attack on the German party system and thus on democracy. “We are extremely worried that, apparently, the content of the stolen documents was analyzed using a very rudimentary AI. This analysis focused on keywords, not the context. The alleged scandals published so far do not stand up to scrutiny – a fact that, thankfully, is being confirmed by a growing number of commentators on social media.” Among the AI-generated summaries compiled by the “activist site” are chains supposedly expressing views related to Holocaust denial, racist and antisemitic rants, the 9/11 disaster, forged documents, and more. Der Spiegel sifted through the raw files and reported that party leader Alice Weidel seemingly knew about illegal donations related to the 2017 federal elections weeks before she previously said she did. The AfD's position is that the AI summaries of the emails are not to be trusted, but it has not specifically commented on the veracity of the raw email files available for download via torrent. It did not immediately respond to our request for input, but has told reporters previously that it will not comment on whether the emails, or the stories that have been written based on them, are to be trusted. ®