一中国公民因传播恶意软件被FBI逮捕

A Chinese citizen has been charged by the FBI with distributing the malicious software used to steal files on more than 25m people from the US Office of Personnel Management in 2014.

美国联邦调查局(FBI)指控一名中国公民传播一款恶意软件。2014年，有人使用该软件从美国人事管理局(OPM)盗取了逾2500万人的文件。

Yu Pingan was arrested at Los Angeles international airport on Wednesday as he arrived in the US for a conference, CNN reported, citing an FBI spokesperson.

周三，俞平安(Yu Pingan，音译)为参加一次大会到达美国时，在洛杉矶国际机场被捕，美国有线电视新闻网(CNN)援引FBI发言人的话报道称。

Mr Yu is not charged with hacking the OPM himself, but rather “with conspiring to commit fraud in connection with computers”, according to an FBI indictment.

FBI的起诉书显示，俞平安被控的罪名不是他本人对OPM发起黑客攻击，而是“与其他人共谋实施与计算机相关的欺诈”。

The FBI alleges in the indictment that Mr Yu provided malware – including the “rarely-used Sakula virus” later employed in the OPM breach – to two unnamed hackers, allowing them to target computer networks owned by US companies.

FBI在起诉书中指称，俞平安把恶意软件——包括后来被入侵OPM过程中使用的“很少用到的Sakula病毒”——提供给了两个不知姓名的黑客，使他们得以瞄准美国公司的计算机网络。

Mr Yu appears to have been aware that his activities could draw the bureau’s attention, based on an excerpt reproduced in the indictment from a conversation on July 27, 2011 with one of his handlers:

根据起诉材料中一段2011年7月27日他与几名处理者之一的对话录音，俞平安似乎意识到，他的行为可能引起FBI的注意：

YU: Lost the shell [access to the RAT], but should be able to get it back.

俞平安: 失去了壳 [对RAT的访问权限]，但应该能够把它拿回来。

UCC #2: Be careful about security UCC #2:

注意安全性

YU: Um

俞平安: 嗯

UCC #2: Don’t draw the attention of the FBI. UCC #2:

不要引起FBI的注意。

The malware in question, Sakula, was identified by the FBI in 2015 as having been used in both the OPM breach and that of US insurer Anthem, which saw data for as many as 80m of its customers exposed.

2015年，FBI发现恶意软件Sakula被用于入侵OPM和美国保险公司Anthem的两起事件。在后一起事件中，多大8000万名客户的资料被泄露。

In June of that year James Clapper revealed that China was the “leading suspect” in the OPM breach after the Financial Times reported earlier that month that evidence pointed to the incident originating in China. OPM director Katherine Archuleta was ultimately forced to resign the following month as more detail on the scale of the breaches came to light.

当年6月，詹姆斯•克拉珀(James Clapper)披露称，中国是OPM遭入侵的“主要嫌疑对象”——在那之前，英国《金融时报》在月初报道称，证据说明发起攻击的源头在中国。随着有关攻击规模的更多细节被曝光，OPM局长凯瑟琳•阿丘利塔(Katherine Archuleta)在随后的一个月被迫辞职。

Mr Yu is the second individual this month arrested in a US airport on charges of creating malware. Marcus Hutchins, British cyber security researcher who helped stop the spread of the WannaCry ransomware, was arrested as he tried to fly home from Las Vegas on charges that he assisted with the creation of malicious software targeting banks.

俞平安是本月在美国机场因创制恶意软件被捕的第二人。曾帮助阻止“想哭”(WannaCry)勒索软件传播的英国网络安全研究人员马库斯•哈钦斯(Marcus Hutchins)正要从拉斯维加斯乘飞机回家时被捕，罪名是他协助创制了针对银行的恶意软件。