賽門(mén)鐵克：“想哭”與朝鮮黑客組織有密切關(guān)聯(lián)

WannaCry, shows “compelling evidence” of a link to North Korean hacking group Lazarus, according to a new report by Symantec.

賽門(mén)鐵克(Symantec)的最新報(bào)告稱(chēng)，有“強(qiáng)有力的證據(jù)”顯示“想哭”(WannaCry)勒索軟件與朝鮮黑客組織Lazarus有關(guān)聯(lián)。

The cyber security company believes there is a “close connection” to Lazarus, the group behind the cyber attacks on Sony Pictures and the Bangladesh central bank, because of similarities in the tools, code and infrastructure used by the hackers.

這家網(wǎng)絡(luò)安全公司相信Lazarus與此事有“密切關(guān)聯(lián)”，因?yàn)楹诳退玫墓ぞ摺⒋a和基礎(chǔ)架構(gòu)有相近之處。Lazarus曾對(duì)索尼影視(Sony Pictures)、孟加拉國(guó)央行發(fā)動(dòng)過(guò)網(wǎng)絡(luò)攻擊。

But the hackers could have been moonlighting and may not have been directed by the North Korean government, Symantec said.

但賽門(mén)鐵克表示，這些黑客可能是兼職，或許并不受朝鮮政府指揮。

Vikram Thakur, technical director of Symantec Security Response, said while they had a “very high level of certainty” that the attackers were using the same tools as Lazarus, the “botched” operation leads them to believer that it was not the work of a nation state, which is usually more sophisticated.

賽門(mén)鐵克安全響應(yīng)部門(mén)技術(shù)總監(jiān)維克拉姆•塔庫(kù)爾(Vikram Thakur)表示，雖然他們“高度確定”攻擊者使用了與Lazarus相同的工具，但其“笨拙”的操作令他們相信這不是某個(gè)國(guó)家所為，國(guó)家展開(kāi)的行動(dòng)通常更復(fù)雜。

“There is a strong possibility that it is some member of the Lazarus group, who has either left or is still working for them, trying to make some money on the side,” he said.

他說(shuō)：“很有可能是Lazarus組織的某個(gè)成員，此人要么已經(jīng)離開(kāi)了該組織，要么仍為其工作，想私下賺點(diǎn)錢(qián)。”

“The discovery of a small number of earlier WannaCry attacks has provided compelling evidence of a link to the Lazarus group,” said the Symantec report.

賽門(mén)鐵克的報(bào)告表示：“對(duì)幾起早期‘想哭’攻擊的發(fā)掘，提供了強(qiáng)有力的證據(jù)表明與Lazarus組織有關(guān)聯(lián)。

“Similarities in code and infrastructure indicate close connection to group that was linked to Sony Pictures and Bangladesh Bank attacks.”

“代碼和基礎(chǔ)架構(gòu)上的相近之處表明，與攻擊索尼影視和孟加拉國(guó)央行的組織有密切關(guān)聯(lián)。”

If the hackers behind the attack are based in North Korea, Mr Thakur believes it was unlikely they would face international prosecution. “The chances of arresting somebody who is based in North Korea is between zero and zero,” he said.

塔庫(kù)爾認(rèn)為，“想哭”背后的黑客如果位于朝鮮，則不太可能受到國(guó)際檢控。他說(shuō)：“逮捕一個(gè)位于朝鮮的人的幾率為零。”