中国支援のサイバー攻撃用ネットワーク解体、米当局発表

【ワシントンＡＦＰ＝時事】米当局は１月３１日、ハッカー集団「ボルト・タイフーン」によるマルウエアに感染したネットワークの解体に成功したと発表した。中国の指示で米国内の浄水や交通システムを標的にしていたとされる。（写真は、米連邦捜査局のクリストファー・レイ長官。米下院特別委員会で）
　欧米数か国は昨年５月、中国が「支援するハッカー集団」が米国の重要なインフラのシステムに侵入しているとして警告を発した。中国政府は、ボルト・タイフーンをめぐる主張を否定している。
　米連邦捜査局のクリストファー・レイ長官は、３１日の米下院特別委員会で「われわれとパートナーはボルト・タイフーンとして知られる、中国が支援するハッカー集団に乗っ取られた多数のルーターを特定したと」と述べた。
　レイ氏は、ハッカー集団はマルウエアを使い、通信、エネルギー、交通、水道などのインフラを標的に「米国民とコミュニティーに大損害を与える」準備をしていたと主張した。
　司法省によると、今回の作戦ではルーターの本来の機能に影響を与えたり、情報を収集したりせずにマルウエアを削除することに成功した。ただし、ルーターが再び感染しない保証はないという。【翻訳編集ＡＦＰＢＢＮｅｗｓ】
〔ＡＦＰ＝時事〕（2024/02/01-16:41）

US authorities said Wednesday they had dismantled a network of hackers known as Volt Typhoon, which was targeting key American public sector infrastructure like water treatment plants and transportation systems at the behest of China.
FBI Director Christopher Wray explained the operation in testimony before a congressional committee on US-China competition, and the Justice Department offered more details in a statement.
In May 2023, the United States and its allies had accused Volt Typhoon, described as a state-sponsored hacking group backed by China, of infiltrating critical US infrastructure networks -- claims rejected by Beijing.
Just this morning, we announced an operation where we and our partners identified hundreds of routers that had been taken over by the PRC state-sponsored hacking group known as Volt Typhoon, Wray told lawmakers.
The Volt Typhoon malware enabled China to hide, among other things, pre-operational reconnaissance and network exploitation against critical infrastructure like our communications, energy, transportation and water sectors.
Wray accused the hackers of readying to wreak havoc and cause real-world harm to American citizens and communities.
If and when China decides the time has come to strike, they're not focused just on political or military targets, he added. Low blows against civilians are part of China's plan.
Assistant Attorney General Matthew Olsen, who works in the Justice Department's national security division, said access to US infrastructure sought by Volt Typhoon was something China would be able to leverage during a future crisis.
The US operation to disrupt the hackers was authorized by a federal court in Texas, the Justice Department said in its statement.
By taking control of hundreds of routers, which were vulnerable as they were no longer supported by their maker's security patches or software updates, the hackers sought to disguise the origin of future China-based hacking activities, it said.
The operation succeeded in wiping the malware from the routers, without impacting their legitimate functions or collecting any information, it added, while saying there was no guarantee the routers could not be reinfected.