GCSAT :: Volume #6

#583: Lagging behind


LNMTL needs user funding to survive Read More

But at this time, intent staying advantage united St. Paul Bank to become one group randomly. 而此时,意呆利联合圣保罗银行内部已经乱成了一团。 Before two hours, in their systems presented massive unaudited account information amendment record, even whether there is the fund of instruction instigates. 就在两小时之前,他们的系统里出现了大量未经审核的账户信息修改记录,其中甚至有无指令的资金调拨。 So long as is engaged in the person of banking industry, knows that this means anything. 只要是从事银行业的人,都知道这意味着什么。 Obviously, they came under the serious attack, but the issue is, the technologies division of entire bank had been transferred, actually discovered the source that they attack could not find. 很显然,他们受到了严重的攻击,但问题是,整个银行的技术部门都已经被调动起来,却发现他们连攻击的源头都找不到。 Theoretically, if must invade a banking system, first at least needs by outside, but in visit application, but in this two hours, all visits is safe, after examination. 理论上来说,如果要侵入一家银行系统,首先至少要有由外而内的访问申请,但就在这个两個小时内,所有的访问都是安全的、经过审批的。 In other words, or is the attacker camouflages the normal visitor who definitely is unable to be distinguished oneself, either is the attack came from the interior directly. 也就是说,要么是攻击者把自己伪装成了一个完全无法被识别的正常访问者、要么是攻击直接来自于内部。 Any situation, had broken through the technical upper limit of uniting St. Paul Bank. 无论是哪一种情况,都已经突破了联合圣保罗银行的技术上限。 They look like already by Troy that the wooden horse invades, actually could not find that only invisible wooden horse. 他们就像是已经被木马入侵的特洛伊城,却找不到那只隐形的木马。 Situation how? Is the instruction still continue produce?” “情况怎么样?指令还在继续产生吗?” Before a bank technology executive's is asking to body technical personnel. 一名银行技术高管对着身前的技术人员问道。 No, we had shut off the network connections of central server urgently, at present the new attack has not produced, that's good, but also is the bad news.” First round website ps:// “没有,我们已经紧急切断了中央服务器的网络连接,目前已经没有新的攻击产生了,这是个好消息,但也是坏消息。”首发网址ps:// I understand, breaks one time unites the brought loss is inestimable ---- But is good because of us has safe, should they compensate?” “我明白,一次断联所带来的损失是不可估量的----但好在我们有保险,他们应该会赔偿吧?” Perhaps will compensate part ....... not to need to count on that they show the kindness of heart greatly, when they in damage surely certainly will keep prices down ruthlessly.” “也许会赔偿一部分.......不用指望他们大发善心,他们在定损时一定会狠狠压价的。” „The bad news that but I say now is not this, but said, this is a clear signal, we receive the evidence of attack.” “但我现在说的坏消息不是这个,而是说,这是一个明确的信号,一个我们受到攻击的证据。” Obviously, the attack is conducted through the network very much, so long as our linked network, will continue to be attacked again, by ability that they show at present, they even can directly our account resets.” “很显然,攻击是通过网络进行的,只要我们重新连接网络,就会继续受到攻击,以他们目前所表现出来的能力,他们甚至可以直接把我们的账户清零。” This is how possible! Our all information connected to the swift system, must tamper with some data, they must decode the entire Swift system completely, in this world can some people achieve?” “这怎么可能!我们的所有信息都接入了swift系统,要篡改这部分数据,他们就必须把整个Swift系统全部破解,这世界上有人能做到吗?” The tone of executive is somewhat unbelievable, he truly can feel the situation stern, but is separated from area of technology too long him, truly does not have the extremely direct-viewing judgment. 高管的语气有些难以置信,他确实能感受到情况的严峻,但脱离技术领域太久的他,也确实没有太过直观的判断。 He felt subconsciously, this time is just the provocation of hackers in the world some corner a handful loves dazzle the technique, they do not dare to start to the banking system directly, even if in the short time can escape traces, so long as national strength involvement, in uses the social worker method in massively the situation, how long they cannot ramble. 他下意识地觉得,这次只不过是世界上某个角落一小撮爱炫技的黑客们的一次挑衅罢了,他们是不敢直接对银行系统下手的,哪怕短时间内能逃过追查,但只要国家力量介入,在大规模使用社工手段的情况下,他们逍遥不了多久。 Since is this, multiple encryption that the swift system uses to them, was still together the natural moat. 既然是这样,那么,swift系统所使用的多重加密对他们来说,就仍然是一道天堑。 The RSA encryption and oval encryption...... these were used dozens years of technology to be timeless to today by human, was still protecting the human most important asset, but it also never displays the sign that must be broken through. RSA加密、椭圆加密......这些被人类使用了数十年的技术到今天历久弥新,仍然守护着人类最重要的资产,而它也从未表现出来过要被攻破的迹象。 But now, oneself technician hand/subordinate said unexpectedly, they can break the limit of SWIFT system, tampers with the transaction data directly? 而现在,自己手下的技术员居然说,他们能够突破SWIFT系统的限制,直接篡改交易数据? Looks facial expression that the executive questioned, technician hesitant moment, replied: 看着高管质疑的神情,技术员犹豫了片刻,回答道: „...... Good, perhaps they will not tamper with the account through the way that Swift settles accounts, but I affirmed very much, they can certainly make the balance in our system demonstrating enull.” “......好吧,也许他们并不会通过Swift结算的方式去篡改账户,但是我很肯定,他们一定能让我们系统中所显示的余额归零。” Like this makes the created injury slightly lowers and tampers with the transaction, words that but wants to restore, needs the extremely high cost.” “这样做所造成的伤害略低与篡改交易,但想要恢复的话,也需要极高的成本。” In brief, we had been compelled in the corner ---- What more difficult office is, on us does not even know those who launch the attack is, also has what goal.” “总之,我们已经被逼到角落里了----更难办的是,我们上甚至都不知道发起进攻的是谁、又有什么目的。” „It is not able to start, at present all security personnel have entered the post, the information are also reported to ICSPA, they will provide the necessary aid to us.” “无从下手,目前所有安防人员都已经进入岗位,信息也已经被上报给了ICSPA,他们会向我们提供必要的援助。” But at present looks like, all work that we do are pursuing the spirit that cannot see unable to feel ....... even the goal not to have, “但目前看来,我们所做的所有工作都是在追逐一个看不见摸不着的幽灵.......连目标都没有, That so-called king network security method naturally also falls on the vacancy. ” The brow of executive closely wrinkles, he himself is also the technical personnel family background, naturally can understand logic that the opposite party stated that but, he did not have the means. 那所谓的王网络安全手段自然也是落在空处的。”高管的眉头紧紧皱起,他自己也是技术人员出身,自然能理解对方所陈述的逻辑,但是,他对此却也毫无办法。 To shoot at the target, at least must have a target. 要想打靶,起码得有个靶子。 The present issue looks like, 10000 km away, some people with a missile raiding of unclear origin one's own side, but all counter-attack methods of one's own side only have several rifles. 现在的问题就像是,在10000公里之外,有人用一颗不明来源的导弹袭击了己方,而己方的所有反击手段却只有几把步枪。 To create killing to the enemy, is having a dream purely. 想要对敌人造成杀伤,纯粹是在做梦。 It seems like that when the technology walks does not pass, can only toward social worker consider. 看来,当技术走不通时,就只能往社工方面考虑了。 Thought deeply about the moment silent, he says: 沉默地思索了片刻,他开口说道: You continue to attempt, I relate other departments to hold the emergency meeting now, if there is latest progress, I inform you immediately.” “你们继续尝试,我现在去联系其他部门召开紧急会议,如果有最新的进展,我会立刻通知你们。” Got it.” “明白了。” The technicians nod to reply, but in fact, he regarded conventional being perfunctory the words of executive. 技术员点头回答,但实际上,他只是把高管的话当成了一种惯例性的敷衍而已。 ...... ...... However, unlike completely, after a half hour that he thinks, the bank management focused on attack merely. 然而,与他所想的完全不同,仅仅在半小时之后,银行管理层就锁定了攻击的方向。 Because this actually not their abilities strong, rather, from the perspective of top overall situation, the clue that the opposite party left behind is really obvious ---- Or the opposite party has not planned to hide own identity from the start. 这倒不是因为他们的能力有多强,而是,从顶层全局的角度来看,对方所留下的线索实在是太明显了----或者说对方压根就没有打算隐藏自己的身份。 In the technology, they can do is very perfect, but logically, they most basic concealing disdains in does. 技术上,他们可以做的很完美,但在逻辑上,他们连最基本的掩饰都不屑于去做。 The clue that the executives gain altogether has several. 高管所获取到的线索总共有几条。 Article 1, because previously one's own side exerted pressure on the account number of suspension or freeze is defrosted completely, the involved bank replied them not to conduct the defrosting operation explicitly. 第一条,此前因为己方施压所暂停或者冻结的账号全部被解冻,涉及的银行明确回复他们并没有进行解冻操作。 Article 2, attacks the account number that aims is the diplomats of one's own side, the attack logic with the freeze and limit of previous one's own side has almost not distinguished completely. 第二条,攻击所针对的账号全部是己方的驻外人员,攻击逻辑跟此前己方的冻结和限制几乎没有区别。 Article 3, before the attack, China just learned several national main representatives stationed abroad are restricted the news. 第三条,在攻击发生之前,华夏刚刚获知了几个国家主要驻外代表受到限制的消息。 Perhaps each clue is independent unable to be telling, when but it happened simultaneously, all became understand clearly. 也许每一条线索独立出来都不能说明问题,但当它同时发生时,一切就都变得清晰明了了。 These are restricted the small country absolutely not to have this ability , the status of opponent is then obvious. 那些受到限制的小国是绝对没有这个能力的,那么,对手的身份已经昭然若揭。 Is Chinese. 华夏人 Chinese launched their offensive, the goal is as to limit the response of small country diplomats banking transaction to one's own side. 华夏人发动了他们的攻势,目的是作为对己方限制小国驻外人员银行交易的回应。 Found the instigator, the issue solved half, but another more important issue surfaced: 找到了始作俑者,问题算是解决了一半,可另一个更重要的问题又浮出了水面: How do they achieve? 他们是怎么做到的? The technical manager associated to get up a series of suddenly he once to notice, detail that but has not actually cared, silent a moment later, he said: 技术主管突然联想起了一系列他曾经注意到,但是却没有放在心上的细节,沉默了片刻之后,他开口说道: Everyone.” “各位。” I have not a very good guess.” “我有一个非常不好的猜测。” If this guess is true, then, it to the attack that we create, will be destructive.” “如果这个猜测属实的话,那么,它对我们造成的打击,将是毁灭性的。” Everyone's vision centralized to his body, he deeply inspires, later says: 所有人的目光都集中到了他的身上,他深深吸了口气,随后开口说道: Modern bank system livelihood RSA cryptographic system, likely, had been broken through.” “现代银行体系赖以生存的RSA加密系统,很可能,已经被攻破了。”
To display comments and comment, click at the button