<p>“在我们说话的同时，某个地方有人正在从他们的机器中被窃取数据，” 网络安全咨询公司 SecurityDiscovery 的联合创始人沃洛迪米尔·迪亚琴科（Volodymyr Diachenko）表示。</p>
<p>Sarayut Thaneerat | Moment | Getty Images</p>
<p>专家警告称，网络犯罪分子加大了盗取和出售在线密码的力度。警报是在发现包含数十亿个暴露账户凭证的在线数据集后发出的。</p>
<p>这 30 个数据集包含了多达 160 亿个登录凭证，涉及多个平台，包括苹果、谷歌和脸书，Cybernews 的研究人员上周首次报道了这一消息。</p>
<p>这些泄露是在今年内由网络安全咨询公司 Security Discovery 的联合创始人沃洛迪米尔·迪亚琴科识别出来的，怀疑是多个团体所为。</p>
<p>迪亚琴科告诉 CNBC：“这是自年初以来出现在我视野中的各种数据集的集合，但它们都共享相同的 URL、登录信息和密码结构。”</p>
<p>根据迪亚琴科的说法，所有迹象都表明泄露的登录信息是 “信息窃取者” 的作品——一种从设备中提取敏感数据的恶意软件，包括用户名和密码、信用卡信息以及在线浏览器数据。</p>
<p>尽管这些登录列表可能包含许多重复项以及过时和不正确的信息，但发现的庞大数量让人们意识到有多少敏感数据在网络上流通。</p>
<p>这也应该引起警惕，信息窃取者已成为今天的 “网络瘟疫”，迪亚琴科说。“在我们说话的同时，某个地方有人正在从他们的机器中被窃取数据。”</p>
<p>迪亚琴科能够检测到这些暴露的数据，因为其所有者曾在没有密码锁的情况下暂时将其索引到网络上。Security Discovery 通常会捕捉到无意中共享的数据泄露，但今年的规模尚未见过。</p>
<p>根据 Palo Alto Networks 亚太及日本区总裁西蒙·格林（Simon Green）的说法，160 亿个暴露凭证的规模令人震惊，确实值得注意，但对于网络安全前线的人来说并不完全令人惊讶。</p>
<p>“许多现代信息窃取者设计了先进的规避技术，使它们能够绕过传统的基于签名的安全控制，从而更难被检测和阻止，” 他补充道。</p>
<p>因此，高调的信息窃取者攻击有所增加。例如，在 3 月份，微软威胁情报披露了一项使用信息窃取者的恶意活动，影响了全球近 100 万台设备。</p>
<p>信息窃取者通常通过欺骗受害者下载恶意软件来获得对其设备的访问权限，这些恶意软件可以隐藏在钓鱼邮件、虚假网站和搜索引擎广告中。</p>
<p>信息窃取者攻击的动机通常是经济利益，攻击者通常试图直接接管银行账户、信用卡和加密货币钱包，或实施身份欺诈。</p>
<p>网络犯罪分子可以利用被盗的凭证和其他个人数据进行高度可信、个性化的钓鱼攻击，并对个人或组织进行勒索。</p>
<p>根据 Palo Alto 的格林，信息窃取者的规模和危险性因地下市场的日益普及而加剧，这些市场提供 “网络犯罪即服务”，供应商向客户收取恶意工具、敏感数据和其他非法在线服务的费用。</p>
<p>“网络犯罪即服务是这里的关键推动力。它从根本上使网络犯罪民主化，” 格林说。</p>
<p>这些地下市场——通常托管在暗网——创造了网络犯罪分子盗取个人信息的需求，然后将其出售给诈骗者。</p>
<p>因此，数据泄露不仅仅关乎个人账户——它们代表了一个 “庞大、相互关联的被妥协身份网络”，可以推动后续攻击，格林说。</p>
<p>根据迪亚琴科的说法，他识别出的至少一些被妥协的登录数据集很可能已经或将被交易给在线诈骗者。</p>
<p>此外，恶意软件工具包和其他资源可以在这些市场上找到，以帮助促进信息窃取者攻击。</p>
<p>CNBC 报道了这些工具和服务的可用性如何显著降低了有意犯罪者的技术门槛，使复杂的攻击能够在全球范围内大规模执行。</p>
<p>报告发现，信息窃取者攻击在 2024 年增长了 58%。</p>
<p>随着恶意软件和在线使用的日益普及，现在可以合理地假设，大多数人将在某个时刻接触到信息窃取者威胁，网络安全公司 Arctic Wolf 的威胁研究与情报副总裁伊斯梅尔·瓦伦苏埃拉（Ismael Valenzuela）表示。</p>
<p>除了频繁更新密码外，个人还需要对隐藏在非法软件、应用程序和其他可下载文件中的恶意软件保持警惕，瓦伦苏埃拉说。他补充说，账户使用多因素认证变得比以往任何时候都更为重要。</p>
<p>从企业的角度来看，采用 “零信任架构” 至关重要，这不仅不断验证用户，还验证设备和用户的行为，他补充道。</p>
<p>各国政府最近也在加大打击信息窃取活动的力度。</p>
<p>在 5 月份，欧洲刑警组织的欧洲网络犯罪中心表示，它与微软和全球当局合作，打击被称为 “Lumma” 的信息窃取者，称其为 “世界上最重要的信息窃取者威胁。”</p>

苹果

谷歌-A

谷歌-C

<p>专家警告称，随着 160 亿个登录凭证在包括苹果、谷歌和 Facebook 等多个平台上被曝光，“信息窃取者” 的威胁正在加剧。网络犯罪分子越来越多地使用先进的恶意软件来提取敏感数据，导致高调攻击的激增。地下市场提供的网络犯罪即服务使得这些恶意工具的获取变得更加普及，从而使犯罪分子更容易实施复杂的攻击。个人和企业被敦促采取更强的安全措施，包括频繁更新密码和使用多因素认证，以应对这一日益严重的威胁</p>

<p>&#34;Someone, somewhere is having data exfiltrated from their machines as we speak,&#34; says Volodymyr Diachenko, co-founder of the cybersecurity consultancy SecurityDiscovery.</p>
<div class="lb-trans"><p>“在我们说话的同时，某个地方有人正在从他们的机器中被窃取数据，” 网络安全咨询公司 SecurityDiscovery 的联合创始人沃洛迪米尔·迪亚琴科（Volodymyr Diachenko）表示。</p>
</div><p>Sarayut Thaneerat | Moment | Getty Images</p>
<div class="lb-trans"><p>Sarayut Thaneerat | Moment | Getty Images</p>
</div><p>Cybercriminals have intensified their efforts to steal and sell online passwords, experts warn. The alarm comes after the discovery of online datasets containing billions of exposed account credentials.</p>
<div class="lb-trans"><p>专家警告称，网络犯罪分子加大了盗取和出售在线密码的力度。警报是在发现包含数十亿个暴露账户凭证的在线数据集后发出的。</p>
</div><p>The 30 datasets comprised a whopping 16 billion login credentials across multiple platforms, including Apple, Google and Facebook, and were first reported by Cybernews researchers last week.</p>
<div class="lb-trans"><p>这 30 个数据集包含了多达 160 亿个登录凭证，涉及多个平台，包括苹果、谷歌和脸书，Cybernews 的研究人员上周首次报道了这一消息。</p>
</div><p>The exposures were identified over the course of this year by Volodymyr Diachenko, co-founder of the cybersecurity consultancy Security Discovery, and are suspected to be the work of multiple parties.</p>
<div class="lb-trans"><p>这些泄露是在今年内由网络安全咨询公司 Security Discovery 的联合创始人沃洛迪米尔·迪亚琴科识别出来的，怀疑是多个团体所为。</p>
</div><p>&#34;This is a collection of various data sets that appeared on my radar since the beginning of the year, but they all share a common structure of URLs, login details and passwords,&#34; Diachenko told CNBC.</p>
<div class="lb-trans"><p>迪亚琴科告诉 CNBC：“这是自年初以来出现在我视野中的各种数据集的集合，但它们都共享相同的 URL、登录信息和密码结构。”</p>
</div><p>According to Daichenko, all signs point to the leaked login information being the work of &#34;infostealers&#34; — malware that extracts sensitive data from devices, including usernames and passwords, credit card information and online browser data.</p>
<div class="lb-trans"><p>根据迪亚琴科的说法，所有迹象都表明泄露的登录信息是 “信息窃取者” 的作品——一种从设备中提取敏感数据的恶意软件，包括用户名和密码、信用卡信息以及在线浏览器数据。</p>
</div><p>While the lists of logins are likely to contain many duplicates as well as outdated and incorrect information, the overwhelming volume of findings puts into perspective how much sensitive data is circulating on the web.</p>
<div class="lb-trans"><p>尽管这些登录列表可能包含许多重复项以及过时和不正确的信息，但发现的庞大数量让人们意识到有多少敏感数据在网络上流通。</p>
</div><p>It should also raise alarms on how infostealers have become the &#34;cyber plague&#34; of today, Daichenko said. &#34;Someone, somewhere, is having data exfiltrated from their machines as we speak.&#34;</p>
<div class="lb-trans"><p>这也应该引起警惕，信息窃取者已成为今天的 “网络瘟疫”，迪亚琴科说。“在我们说话的同时，某个地方有人正在从他们的机器中被窃取数据。”</p>
</div><p>Daichenko was able to detect the exposed data because their owners had temporarily indexed them on the web without a password lock. Inadvertently shared data leaks are often caught by Security Discovery, but not at scales seen so far this year.</p>
<div class="lb-trans"><p>迪亚琴科能够检测到这些暴露的数据，因为其所有者曾在没有密码锁的情况下暂时将其索引到网络上。Security Discovery 通常会捕捉到无意中共享的数据泄露，但今年的规模尚未见过。</p>
</div><p>According to Simon Green, president of Asia-Pacific and Japan at Palo Alto Networks, the sheer scale of the 16 billion exposed credentials is alarming and certainly notable, but not entirely surprising for those on the front lines of cybersecurity.</p>
<div class="lb-trans"><p>根据 Palo Alto Networks 亚太及日本区总裁西蒙·格林（Simon Green）的说法，160 亿个暴露凭证的规模令人震惊，确实值得注意，但对于网络安全前线的人来说并不完全令人惊讶。</p>
</div><p>&#34;Many modern infostealers are designed with advanced evasion techniques, allowing them to bypass traditional, signature-based security controls, making them harder to detect and stop,&#34; he added.</p>
<div class="lb-trans"><p>“许多现代信息窃取者设计了先进的规避技术，使它们能够绕过传统的基于签名的安全控制，从而更难被检测和阻止，” 他补充道。</p>
</div><p>Consequently, there's been an uptick in high-profile infostealer attacks. For example, in March, Microsoft Threat Intelligence disclosed a malicious campaign using infostealers that had affected nearly 1 million devices globally.</p>
<div class="lb-trans"><p>因此，高调的信息窃取者攻击有所增加。例如，在 3 月份，微软威胁情报披露了一项使用信息窃取者的恶意活动，影响了全球近 100 万台设备。</p>
</div><p>Infostealers typically gain access to victims' devices by tricking them into downloading the malware, which can be hidden in everything from phishing emails to phony websites to search engine ads.</p>
<div class="lb-trans"><p>信息窃取者通常通过欺骗受害者下载恶意软件来获得对其设备的访问权限，这些恶意软件可以隐藏在钓鱼邮件、虚假网站和搜索引擎广告中。</p>
</div><p>The motive behind infostealer attacks is usually financial, with attackers often looking to directly take over bank accounts, credit cards, and cryptocurrency wallets or commit identity fraud.</p>
<div class="lb-trans"><p>信息窃取者攻击的动机通常是经济利益，攻击者通常试图直接接管银行账户、信用卡和加密货币钱包，或实施身份欺诈。</p>
</div><p>Cybercriminals can use stolen credentials and other personal data for purposes such as crafting highly convincing, personalized phishing attacks and blackmailing individuals or organizations.</p>
<div class="lb-trans"><p>网络犯罪分子可以利用被盗的凭证和其他个人数据进行高度可信、个性化的钓鱼攻击，并对个人或组织进行勒索。</p>
</div><p>According to Palo Alto's Green, the scale and dangers of those types of infostealers have intensified, thanks to the growing prevalence of underground markets that offer &#34;cybercrime-as-a-Service,&#34; in which vendors charge customers for malicious tools, sensitive data and other illicit online services.</p>
<div class="lb-trans"><p>根据 Palo Alto 的格林，信息窃取者的规模和危险性因地下市场的日益普及而加剧，这些市场提供 “网络犯罪即服务”，供应商向客户收取恶意工具、敏感数据和其他非法在线服务的费用。</p>
</div><p>&#34;Cyber crime-as-a-Service is the critical enabler here. It has fundamentally democratized cybercrime,&#34; Green said.</p>
<div class="lb-trans"><p>“网络犯罪即服务是这里的关键推动力。它从根本上使网络犯罪民主化，” 格林说。</p>
</div><p>Those underground markets — often hosted on the dark web — create demand for cybercriminals to steal personal information and then sell that to scammers.</p>
<div class="lb-trans"><p>这些地下市场——通常托管在暗网——创造了网络犯罪分子盗取个人信息的需求，然后将其出售给诈骗者。</p>
</div><p>In that way, data breaches become about more than just the individual accounts — they represent a &#34;vast, interconnected web of compromised identities&#34; that can fuel subsequent attacks, Green said.</p>
<div class="lb-trans"><p>因此，数据泄露不仅仅关乎个人账户——它们代表了一个 “庞大、相互关联的被妥协身份网络”，可以推动后续攻击，格林说。</p>
</div><p>According to Diachenko, it's likely that at least some of the compromised login datasets he identified had or will be traded to online scammers.</p>
<div class="lb-trans"><p>根据迪亚琴科的说法，他识别出的至少一些被妥协的登录数据集很可能已经或将被交易给在线诈骗者。</p>
</div><p>On top of that, malware kits and other resources that can help to facilitate infostealer attacks can be found on those markets.</p>
<div class="lb-trans"><p>此外，恶意软件工具包和其他资源可以在这些市场上找到，以帮助促进信息窃取者攻击。</p>
</div><p>CNBC has reported on how the availability of those tools and services has significantly lowered technical barriers for aspiring criminals, allowing sophisticated attacks to be executed at a massive, global scale.</p>
<div class="lb-trans"><p>CNBC 报道了这些工具和服务的可用性如何显著降低了有意犯罪者的技术门槛，使复杂的攻击能够在全球范围内大规模执行。</p>
</div><p>The report found that infostealer attacks grew by 58% in 2024.</p>
<div class="lb-trans"><p>报告发现，信息窃取者攻击在 2024 年增长了 58%。</p>
</div><p>With the increasing prevalence of malware and online usage, it's now fair to assume that most people will, at some point, come in contact with an infostealer threat, said Ismael Valenzuela, vice president of threat research and intelligence at cybersecurity company Arctic Wolf.</p>
<div class="lb-trans"><p>随着恶意软件和在线使用的日益普及，现在可以合理地假设，大多数人将在某个时刻接触到信息窃取者威胁，网络安全公司 Arctic Wolf 的威胁研究与情报副总裁伊斯梅尔·瓦伦苏埃拉（Ismael Valenzuela）表示。</p>
</div><p>In addition to frequent password updates, individuals will need to be more alert about the increasing amount of malware hiding in illegitimate software, applications and other downloadable files, Valenzuela said. He added that the use of multi-factor authentication on accounts has become more important than ever.</p>
<div class="lb-trans"><p>除了频繁更新密码外，个人还需要对隐藏在非法软件、应用程序和其他可下载文件中的恶意软件保持警惕，瓦伦苏埃拉说。他补充说，账户使用多因素认证变得比以往任何时候都更为重要。</p>
</div><p>From a corporate perspective, it's important to adopt a &#34;zero trust architecture&#34; that not only constantly authenticates the user, but also authenticates the device and user's behavior, he added.</p>
<div class="lb-trans"><p>从企业的角度来看，采用 “零信任架构” 至关重要，这不仅不断验证用户，还验证设备和用户的行为，他补充道。</p>
</div><p>Governments have also been doing more to crack down on infostealing activities in recent months.</p>
<div class="lb-trans"><p>各国政府最近也在加大打击信息窃取活动的力度。</p>
</div><p>In May, Europol's European Cybercrime Centre said it had collaborated with Microsoft and global authorities to disrupt the &#34;Lumma&#34; infostealer, which it called &#34;the world's most significant infostealer threat.&#34;</p>
<div class="lb-trans"><p>在 5 月份，欧洲刑警组织的欧洲网络犯罪中心表示，它与微软和全球当局合作，打击被称为 “Lumma” 的信息窃取者，称其为 “世界上最重要的信息窃取者威胁。”</p>
</div>

'Cyber plague': Experts warn of growing infostealer threat after billions of login details exposed

- 网络犯罪分子加大了对在线密码的盗取和销售力度。  
- 发现包含 160 亿个登录凭证的数据集，涉及多个平台。  
- 政府和企业需加强防范，采用零信任架构以应对威胁。

‘网络瘟疫’：专家警告称，随着数十亿登录信息的泄露，信息窃取者的威胁正在不断增加