中国黑客被控入侵美国律师电脑，获利400万美元

Law firms that advise on mergers once had to worry about a rogue employee trading on deal tips. Now, they have to worry about hackers doing the same.

以前，负责并购交易的律师事务所需要担心行为不轨的员工用与交易有关的内部信息买卖股票。现在，他们也要小心黑客会做出同样的行为。

Federal prosecutors in Manhattan have charged three Chinese citizens with making more than $4 million by trading on information they got by hacking into some of the top merger-advising law firms in New York. The three men targeted at least seven New York law firms to try to obtain information about deals in the works, according to an indictment unsealed on Tuesday.

曼哈顿的联邦检察官已起诉三名中国公民，指控他们用黑客手法，从纽约几家最大的律师事务所窃取信息，并用有关信息进行股票交易，获利逾400万美元，被窃取信息的律师事务所均从事并购业务。据周二公布的起诉书显示，这三人的目标包括至少七家纽约律师事务所，他们试图获取律所正在进行的并购业务相关信息。

The men were successful in hacking two firms, stealing emails of partners who work on mergers, prosecutors said. The three then bought shares of target companies, selling them after the deals were announced, prosecutors said.

三人成功地对两家律师事务所进行了黑客攻击，窃取了从事并购业务的律所合伙人的电子邮件，检察官说。然后，这三人买入目标公司的股票，在收购宣布后，再将股票卖出，检察官说。

Shares of targets in most such transactions tend to trade higher when a deal is announced because they are usually purchased for more than their market price.

在此类并购交易中，大多数目标公司股票的交易价往往会在并购宣布后上涨，因为这些公司的并购价通常高于其股市价格。

Hackers’ ability to breach the defenses of big law firms in search of confidential information about corporate clients — including tips about coming mergers and acquisitions — has long been a concern of federal authorities. Most major law firms have played down the threat posed by hackers and have been reluctant to discuss breaches or even attempted breaches.

联邦当局长期以来一直关注的一个问题是，黑客为获得律师事务所企业客户的机密信息，包括有关并购的内部信息，攻破大型律师事务所的网络防御。大多数大型律师事务所都不重视黑客的威胁，不愿讨论遭受黑客攻击的问题，甚至不愿讨论未能成功的攻击。

“This case of cyber meets securities fraud should serve as a wake-up call for law firms around the world,” Preet Bharara, the United States attorney in Manhattan, said in a statement. “You are and will be targets of cyberhacking because you have information valuable to would-be criminals.”

曼哈顿的联邦检察官普里特·巴拉拉(Preet Bharara)在一份声明中说，“这个网络与证券欺诈结合的案件应当为世界各地的律师事务所敲响警钟：你们是、并且会成为网络黑客的目标，因为你们手握对潜在的犯罪者有价值的信息。”

The law firms were not identified in the indictment or in a parallel civil complaint brought by the Securities and Exchange Commission.

在这份起诉书和证监会提出的相关民事起诉状中，都没有披露相关律师事务所的名字。

Earlier this year, one large New York firm, Cravath, Swaine & Moore, confirmed that it had been the victim of a “limited breach” of its computer network in the summer of 2015. At the time, the law firm said it was “not aware that any of the information that may have been accessed has been used improperly.”

今年早些时候，大型纽约律所科瓦斯-斯怀恩-摩尔国际律师事务所(Cravath, Swaine & Moore)承认，他们的计算机网络在2015年夏遭到了“小破坏”。当时该律所表示，他们“没发现有人不当使用了任何可能被盗窃的信息”。

Cravath did not immediately respond to phone calls and emails seeking comment on Tuesday.

该律所没有立即回应本周二寻求置评的电话和电子邮件。

“Law firms have been identified as the weakest link, and it is great to see the U.S. attorney taking an interest,” said Daniel Garrie, a law firm security consultant.

“律师事务所被认为是最薄弱的环节，”律所安全顾问丹尼尔·加里(Daniel Garrie)说，“很高兴看到联邦检察官对此表现出兴趣”。

The three men charged with insider trading and hacking are Iat Hong, Bo Zheng and Chin Hung, the United States attorney’s office and the Federal Bureau of Investigation said. Mr. Hong, a resident of Macau, was arrested in Hong Kong on Christmas. 美国联邦检察官办公室和联邦调查局说，遭到内幕交易和黑客罪名指控的三个人是康乐(Iat Hong，音)、郑波(Bo Zheng，音)和洪展(Chin Hung，音)。其中Iat Hong是澳门居民，已于圣诞在香港被捕。

The indictment and the S.E.C. complaint detailed a number of major deals in which confidential information had been retrieved.

起诉书和证交会的民事起诉状详细介绍了被盗走的机密信息所涉及一些的重大交易。

One law firm was hacked in connection with the sale of Intermune, an American drug maker, to Roche of Switzerland, and the sale of Altera, a circuit manufacturer, to Intel. In both cases, the three men entered the law firm’s servers after unlawfully obtaining an employee’s credentials. They then installed malware on the law firm’s web server, prosecutors said, enabling them to obtain information about live deals, including the price at which they were being negotiated.

一家遭入侵的律师事务所和瑞士罗氏公司(Roche)收购美国因特姆尔制药公司(Intermune)，以及英特尔收购拓朗半导体(Altera)的交易有关系。在这两宗并购案中，三个人在非法获得雇员的登录资料后，入侵了该律师事务所的服务器。检察官说，然后他们在该律所的网络服务器上安装了恶意软件，以便随时掌握交易信息，包括当时正在谈判的价格等等。

The three successfully penetrated the servers of another law firm to obtain details about the acquisition by Pitney Bowes of Borderfree, prosecutors said.

检察官表示，三人还成功入侵了另一家律师事务所的服务器，获取了必能宝(Pitney Bowes)收购无国界电子商务公司(Borderfree)的详细信息。

They were extraordinarily active in pursuing information. The indictment says that from March to September 2015, the three men “attempted to cause unauthorized access to the networks and servers of the targeted law firms on more than 100,000 occasions.”

他们在寻求信息方面非常活跃。起诉书说，从2015年3月到9月，这三个人“企图在未经授权的情况下进入一些律所的网络和服务器，次数超过10万次”。

Lawyers for the three men could not immediately be located.

目前尚未联系到这三个人的律师。

The three were also involved with a start-up robotics company that was developing controller chips and control system solutions. They were accused of having sought confidential information like proprietary designs from two other robotics companies.

三人还与一家正在开发控制器芯片和控制系统解决方案的机器人初创公司有关联。他们被指控试图窃取其他两家机器人公司的专利设计等机密信息。