美国司法部表示，已与两大稳定币发行商合作，努力追回黑客从币安加密货币交易所窃取的逾 60 亿美元资金中的近一半。
The Justice Department says it’s joined with the two biggest stablecoin issuers in efforts to secure almost half the money stolen when hackers absconded with more than $6 billion from the Binance crypto exchange.
司法部获得法院授权，查封或限制泰达币公司和 Circle Internet Group Inc. 在 10 月 29 日入侵事件发生后立即冻结的 27 亿美元资金中的 12 亿美元。联邦调查局将该黑客组织称为“TraderTraitor”，调查人员正继续追查剩余资金，因为黑客试图通过跨链桥、混币器和交易所洗白这些加密货币。
The department got court authorization to seize or restrain $1.2 billion of the $2.7 billion of funds frozen by Tether and Circle Internet Group Inc. in the immediate aftermath of the Oct. 29 break-in. Investigators are continuing to pursue the rest as the hackers, whom the FBI calls TraderTraitor, try to launder the cryptocurrency through bridges, mixers and exchanges.
国家安全司首席副助理司法部长 M. Scott Proctor 在声明中说：“国家安全司将利用其掌握的一切工具，查封并追回朝鲜的非法所得。”他表示，朝鲜利用加密货币窃取来为其政府和武器计划提供资金。
“The National Security Division will use every tool at its disposal to seize and return North Korea’s ill-gotten gains,” M. Scott Proctor, principal deputy assistant attorney general for national security, said in a statement. He said North Korea uses cryptocurrency theft to finance its government and weapons program.
这次针对全球最大加密货币交易所的攻击是有记录以来最大的加密货币盗窃案，从客户处窃取了价值 63 亿美元的数字资产。币安此后已利用利润和应急资金替换了所有被盗资产。
The attack on the world’s largest crypto exchange was the biggest cryptocurrency theft on record, siphoning $6.3 billion in digital assets from customers. Binance has since replaced all of the stolen assets using profits and emergency funds.
该交易所称，黑客最初通过虚假面试诱骗一名工程师，随后渗透了负责数字钱包的其他员工，币安将其描述为一个为期数月的行动，涉及恶意软件、被攻陷的设备和人工智能。
The exchange has said the hackers initially compromised an engineer through a fake job interview before infiltrating other employees who worked on its digital wallets, part of what Binance described as a months-long operation involving malicious software, compromised devices and artificial intelligence.
随后，黑客开始通过数千个数字钱包和多条区块链转移被盗资产以掩盖来源。据区块链分析公司 Elliptic 称，一周内，洗钱行动已使用超过 2 万个钱包，执行至少 6.5 万笔交易，而稳定币发行商和其他公司则在资金转移前冻结了数十亿美元。
The hackers then began moving the stolen assets through thousands of digital wallets and multiple blockchains to obscure their origins. Within a week, the laundering operation had used more than 20,000 wallets and executed at least 65,000 transactions, according to blockchain analytics firm Elliptic, while stablecoin issuers and other companies moved to freeze billions of dollars before they could be transferred.
助理司法部长 A. Tysen Duva 表示，刑事司和执法合作伙伴在 Binance 资产“超出执法部门触及范围”之前将其冻结，阻止了他所谓的“历史性违规”事件中约一半的资金流失。联邦调查局（FBI）、特勤局和国税局（IRS）随即发布警报，将此次盗窃归咎于朝鲜，并敦促数字资产公司阻断涉及黑客使用地址的交易。朝鲜否认对归咎于其的加密货币盗窃负责。
Assistant Attorney General A. Tysen Duva said the Criminal Division and law enforcement partners froze Binance assets “before they got beyond law enforcement reach,” halting about half of what he called a “historic breach.”The FBI, Secret Service and Internal Revenue Service issued an alert shortly afterward attributing the theft to North Korea and urging the digital-asset companies to block transactions involving addresses used by the hackers. North Korea has denied responsibility for cryptocurrency thefts attributed to it.
司法部周四还表示，扣押了支持另一朝鲜黑客行动的云基础设施，该行动在过去 18 个月中窃取了超过 4 亿美元的加密货币。FBI 将该计划称为“FaceStealer”（窃脸者）。
The Justice Department also said Thursday that it seized cloud infrastructure supporting a separate North Korean hacking operation that has stolen more than $400 million in cryptocurrency over the past 18 months. The FBI calls the scheme FaceStealer.
FaceStealer 利用受害者本人使下一次攻击更具说服力。黑客劫持即时通讯和社交媒体账号，并利用它们邀请受害者的联系人参加虚假的 Zoom 或 Microsoft Teams 会议。一旦目标加入，他们就会播放目标认识的人的预先录制的网络摄像头画面，制造一个明显的技术问题，并提供一个“修复方案”，该方案实则安装恶意软件。
FaceStealer uses victims themselves to make the next attack more convincing. Hackers hijack messaging and social-media accounts and use them to invite the victim’s contacts to fake Zoom or Microsoft Teams meetings. Once a target joins, they play prerecorded webcam footage of someone the target knows, manufacture an apparent technical problem and offer a “fix” that instead installs malware.
FBI 洛杉矶分局主管助理局长 Patrick Grandy 在声明中说：“如果你无法想象自己可能上当受骗的场景，说明你的想象力还不够丰富。”
“If you can’t imagine a scenario where you might fall prey to it, you are not thinking creatively enough,” Patrick Grandy, assistant director in charge of the FBI’s Los Angeles field office, said in a statement.
FBI 扣押了 900 多段从受害者那里秘密录制、后来被用来冒充他们的网络摄像头视频。黑客还开始使用加密货币行业知名人士的深度伪造视频，使欺诈性会议更具说服力。
The FBI seized more than 900 webcam videos secretly recorded from victims and later used to impersonate them. The hackers have also begun using deepfakes of prominent figures in the cryptocurrency industry to make fraudulent meetings more convincing.
这场行动越来越多地以开源软件开发者为目标，这引发了这样一种前景：攻破一名开发者就可能使更多用户面临风险。今年早些时候，黑客感染了一名 JavaScript 库维护者的电脑，该库每周被下载数千万次，并试图创建恶意依赖项，这些依赖项本会随合法下载一起分发。据联邦调查局称，该行动在恶意软件扩散前被发现。
The campaign is increasingly targeting open-source software developers, raising the prospect that compromising a single person could expose far larger numbers of users. Earlier this year, hackers infected the computer of a maintainer of a JavaScript library downloaded tens of millions of times a week and attempted to create malicious dependencies that would have been distributed with legitimate downloads. The effort was detected before the malicious software could spread, according to the FBI.