赛门铁克：“想哭”与朝鲜黑客组织有密切关联
赛门铁克(Symantec)的最新报告称，有“强有力的证据”显示“想哭”(WannaCry)勒索软件与朝鲜黑客组织Lazarus有关联。
The cyber security company believes there is a “close connection” to Lazarus, the group behind the cyber attacks on Sony Pictures and the Bangladesh central bank, because of similarities in the tools, code and infrastructure used by the hackers.
这家网络安全公司相信Lazarus与此事有“密切关联”，因为黑客所用的工具、代码和基础架构有相近之处。Lazarus曾对索尼影视(Sony Pictures)、孟加拉国央行发动过网络攻击。
But the hackers could have been moonlighting and may not have been directed by the North Korean government, Symantec said.
但赛门铁克表示，这些黑客可能是兼职，或许并不受朝鲜政府指挥。
Vikram Thakur, technical director of Symantec Security Response, said while they had a “very high level of certainty” that the attackers were using the same tools as Lazarus, the “botched” operation leads them to believer that it was not the work of a nation state, which is usually more sophisticated.
赛门铁克安全响应部门技术总监维克拉姆•塔库尔(Vikram Thakur)表示，虽然他们“高度确定”攻击者使用了与Lazarus相同的工具，但其“笨拙”的操作令他们相信这不是某个国家所为，国家展开的行动通常更复杂。
“There is a strong possibility that it is some member of the Lazarus group, who has either left or is still working for them, trying to make some money on the side,” he said.
他说：“很有可能是Lazarus组织的某个成员，此人要么已经离开了该组织，要么仍为其工作，想私下赚点钱。”
“The discovery of a small number of earlier WannaCry attacks has provided compelling evidence of a link to the Lazarus group,” said the Symantec report.
赛门铁克的报告表示：“对几起早期‘想哭’攻击的发掘，提供了强有力的证据表明与Lazarus组织有关联。
“Similarities in code and infrastructure indicate close connection to group that was linked to Sony Pictures and Bangladesh Bank attacks.”
“代码和基础架构上的相近之处表明，与攻击索尼影视和孟加拉国央行的组织有密切关联。”
If the hackers behind the attack are based in North Korea, Mr Thakur believes it was unlikely they would face international prosecution. “The chances of arresting somebody who is based in North Korea is between zero and zero,” he said.
塔库尔认为，“想哭”背后的黑客如果位于朝鲜，则不太可能受到国际检控。他说：“逮捕一个位于朝鲜的人的几率为零。”
