谷歌：警惕政府聘請“雇傭黑客”發(fā)動網(wǎng)絡(luò)攻擊

Rogue governments are increasingly buying “off the shelf” hacking attacks, according to Google’s security chief, making it easier and cheaper for them to launch cyber attacks.

谷歌(Google)信息隱私和安全主管希瑟•阿德金斯(Heather Adkins)表示，流氓政府正越來越多的購買“現(xiàn)成”的黑客攻擊，這可以讓它們更容易、更低價的方式發(fā)動網(wǎng)絡(luò)攻擊。

Heather Adkins, director of information privacy and security at Google, made the remarks at a conference in San Francisco on Monday. While state-sponsored cyber attacks were nothing new, she said, the number of incursions was rising.

阿德金斯是在周一舊金山的一個會議上發(fā)表這番言論的。她表示，盡管政府支持的網(wǎng)絡(luò)攻擊不再新鮮，但網(wǎng)絡(luò)攻擊的數(shù)量在增加。

“What I see increasing trendwise is the attack platforms are no longer something they need to build themselves, they can buy it off the shelf,” said Ms Adkins. As a result, smaller governments were able to launch cyber attacks inexpensively, without having to assemble their own teams of hackers, she said.

她表示：“我看到這種趨勢正日益增強：它們不再需要自己打造平臺，它們可以購買現(xiàn)成的。”她表示，因此，較小的政府能夠以低廉的價格發(fā)動網(wǎng)絡(luò)攻擊，不必組建自己的黑客團(tuán)隊。

Security analysts have blamed Russian state-backed cyber spies for a number of recent attacks. Chinese state-backed hackers have been accused of industrial espionage. Pro-Syrian government hackers have also been identified.

安全分析人士將最近大量網(wǎng)絡(luò)攻擊歸咎于得到政府支持的俄羅斯網(wǎng)絡(luò)間諜。得到政府支持的中國黑客也被指控從事商業(yè)間諜活動。支持?jǐn)⒗麃喺暮诳鸵惨驯淮_認(rèn)。

Paul Innella, chief executive of cyber security firm TDI Security, said the price for off-the-shelf hacks depended on the type of attack.

網(wǎng)絡(luò)安全公司TDI Security首席執(zhí)行官保羅•因內(nèi)拉(Paul Innella)表示，現(xiàn)成黑客攻擊的價格取決于攻擊類型。

“Dedicated outcomes against known large enterprises or governments, or the ‘big heist’, command much higher paydays, usually in the tens of thousands [of US dollars],” he said.

他表示：“針對知名大企業(yè)或政府的網(wǎng)絡(luò)攻擊要價較高，通常數(shù)萬美元。”

Governments often supplement their hacking capabilities with so-called “hackers-for-hire”, Mr Innella said. “It appears that the lengthy attacks committed by state-actors are handled by their own government capability while hackers-for-hire handle some more specialised attacks or a specific task that might be better served carried out from a different originating endpoint in the web.”

因內(nèi)拉表示，政府通常會用所謂的“雇傭黑客”來補充自己的黑客實力。“一國政府發(fā)動的長期攻擊似乎由自己的政府能力負(fù)責(zé)，而“雇傭黑客”則從事一些更專業(yè)的攻擊或特別任務(wù)，從網(wǎng)絡(luò)中不同的原始端點進(jìn)行攻擊可能效果更好。”