Starset Society 中文镜像站

俄国对SolarWinds进行造成历史性混乱的攻击

STARSET Society是位于美国的组织,我们(STARSET_Mirror)提醒您注意这些报道的隐含立场。

Russia’s SolarWinds Hack Is a Historic Mess

俄罗斯对IT管理公司SolarWinds的黑客攻击早在今年3月就开始了,这一行为直到行凶者利用这一途径闯入网络安全公司FireEye时才被曝光,FireEye在12月9日首次披露了一个漏洞。从那时起,已经确认了大量的受害者,包括美国国务院、国土安全部、商务部、财政部以及国家卫生研究院。攻击的性质和黑客的异常小心意味着,可能需要数月或更长时间才能知道损失的程度。不过,这一影响已经是毁灭性的,它突显出美国在防御已知威胁和作出回应方面准备不足。补全计划也在进行中。

Russia’s hack of IT management company SolarWinds began as far back as March, and it only came to light when the perpetrators used that access to break into the cybersecurity firm FireEye, which first disclosed a breach on December 9. Since then, a cascading number of victims have been identified, including the US Departments of State, Homeland Security, Commerce, and the Treasury, as well as the National Institutes of Health. The nature of the attack—and the tremendous care taken by the hackers—means it could be months or longer before the extent of the damage is known. The impact is already devastating, though, and it underscores just how ill-prepared the US was to defend against a known threat—and to respond. It’s also ongoing.

原文来自 Wired

翻译:STARSET_Mirror翻译组
审校:STARSET_Mirror翻译组

STARSET_Mirror