法國官員指控伊朗駭入冷藏設備，誓言反制

Raphael Satter 與 Gabriel Stargardter 報導By Raphael Satter and Gabriel Stargardter

巴黎11月9日（路透社）——法國官員週一指控，伊朗革命衛隊應對上月導致法國各地商用冷藏櫃與冷凍櫃停擺的網路攻擊負責，並表示伊朗將承擔後果。PARIS, Nov 9 (Reuters) - French officials on Monday accused Iran's Revolutionary Guards of responsibility for the cyberattacks that knocked out commercial refrigerators and freezers across France last month, saying there would be consequences for Iran.

10月初襲擊法國數百家超市的駭客攻擊，是2月爆發伊朗戰爭以來破壞性最強的網路攻擊之一；這場衝突的特徵，是零星傳出遭指控的數位破壞事件。其中包括3月針對洛杉磯大眾運輸系統的駭客攻擊、7月針對美國淨水廠的攻擊，以及8月針對駛往美國船隻的攻擊。The hacks that struck hundreds of French supermarkets in early October were among the most disruptive cyberattacks of the Iran war that began in February, a conflict that has been marked by scattered incidents of alleged digital disruption. These have included hacks against the Los Angeles transit system in March, against US water treatment plants in July and against ships bound for the United States in August.

伊朗駐聯合國代表團未回覆尋求評論的訊息。伊朗一向否認從事惡意網路行動。Iran's mission to the United Nations did not return messages seeking comment. Iran routinely denies carrying out malicious cyber operations.

路透社披露調查人員私下懷疑伊朗是攻擊幕後黑手後，法國僅在數分鐘後便發布這項聲明。法國外交部長尚-諾艾爾・巴羅（Jean-Noël Barrot）表示，伊朗大使已被召至法國外交部。巴羅並威脅將對伊朗祭出進一步歐盟制裁。The French announcement was made only minutes after Reuters revealed that investigators privately suspected Iran of being behind the attacks. French Foreign Minister Jean-Noël Barrot said the Iranian ambassador had been summoned to France's foreign ministry. Barrot also threatened further EU sanctions against Iran.

10月11日駭客攻擊造成的影響相當劇烈。有些冷藏櫃的溫度被調得太高，以致起火。事件發生後數小時內，超市員工把裝滿腐壞肉品與融化冰淇淋的箱子推進大型垃圾容器。一名法國超市業者估計，這次攻擊在全國造成的總成本可能高達數千萬歐元。The effects of the October 11 hacks were dramatic. Some refrigerators had the temperature turned up so high they caught fire. In the hours following the incident, supermarket employees carted boxes full of perished meat and melted ice cream into giant trash containers. The attack's total costs could add up to tens of millions of euros nationwide, one French supermarket owner estimated.

在法國的攻擊之後，本月又出現第二波駭客攻擊，波及歐洲逾100處場所，甚至影響法國血庫使用的冷藏櫃，迫使血庫員工將部分血液移至其他冷藏設備。The French hacks have since been followed, this month, by a second wave of hacking that hit more than 100 establishments across Europe and even affected refrigerators used by French blood banks, prompting employees there to have to move some of the blood to different cold storage units.

沙希德・卡韋SHAHID KAVEH

法國情報與網路機構在一份聯合報告中指控，沙希德・卡韋（Shahid Kaveh）是這場駭客攻擊行動的幕後黑手；該單位被描述為與革命衛隊有關的網路攻擊單位。報告並點名3名據稱相關人士：哈米德・禮薩・拉什加里安（Hamid Reza Lashgarian）、馬赫迪・拉什加里安（Mahdi Lashgarian）與禮薩・薩拉爾萬德（Reza Salarvand）。In a joint report issued by French spy and cyber agencies, officials accused Shahid Kaveh — described as a cyber offensive unit tied to the Revolutionary Guards — of being behind the hacking campaign, and named three alleged associates, Hamid Reza Lashgarian, Mahdi Lashgarian and Reza Salarvand.

法國報告指出，這些駭客透過許多偽裝成義警駭客的空殼團體運作，包括「CyberAveng3rs」與「Cyber Isnaad Front」。The French report said the hackers worked through numerous front groups masquerading as vigilante hackers, including "CyberAveng3rs" and "Cyber Isnaad Front."

路透社無法立即找到這些男子的聯絡方式；他們的照片被列入報告中。巴黎檢方在另一份聲明中表示，已要求針對犯案者發布國際逮捕令。Reuters could not immediately locate contact details for the men, whose photographs were included in the report. Paris prosecutors said in a separate statement that they have requested international arrest warrants aimed at the perpetrators.

法方表示，他們能將沙希德・卡韋與這些駭客攻擊連結起來，是因為把事件與用來破壞冷藏櫃的數位基礎設施相互對照，並將入侵模式與沙希德・卡韋發動的其他駭客攻擊進行比對，同時也在攻擊基礎設施中找回波斯語痕跡。The French said they were able to link Shahid Kaveh to the hacks by tying the incidents to the digital infrastructure used to sabotage the fridges, by matching the pattern of the intrusion to other hacks carried out by Shahid Kaveh and by recovering traces of Farsi in the attack infrastructure.

報告指出，法國各地共有700處商業據點成為目標，且駭客調高溫度後，至少發生15起火災。報告稱，受影響者大多是超市，但駭客攻擊也波及小型肉舖、一座屠宰場，以及加工食品的工廠。The report said that a total of 700 commercial sites had been targeted across France and that at least 15 fires had broken out as the hackers cranked up the heat. The report said that most of those affected were supermarkets but that the hacking also affected small butcher stores, a slaughterhouse and factories processing foodstuffs.

大西洋兩岸的政府官員與科技公司一直急著查明這些駭客攻擊的真相。3名知情人士表示，微軟至少在兩週前已私下把10月的冷藏設備破壞事件與伊朗連結起來。微軟拒絕評論。Government officials and tech companies on both sides of the Atlantic have been scrambling to get to the bottom of the hacks. Microsoft had privately tied Iran to the October cold-storage sabotage at least two weeks ago, according to three people familiar with the matter. Microsoft declined to comment.

美國冷藏櫃遭駭US REFRIGERATOR HACKS

歐洲超市冷藏櫃遭破壞之前，美國至少已發生一起類似事件。The sabotage of European supermarket fridges was preceded by at least one similar incident in the United States.

8月，至少6座美軍福利社的冷藏櫃停止運作。路透社上月報導，五角大廈調查人員正把這些故障當作疑似網路攻擊處理，並與法國官員合作。一名知情人士表示，五角大廈認為伊朗是8月福利社遭駭事件的嫌疑方，但調查仍在進行。In August, refrigerators in at least six military commissaries went out of commission. Pentagon investigators are treating the malfunctions as a suspected cyberattack and are working with French officials, Reuters reported last month. A person familiar with the matter said that the Pentagon considers Iran a suspect in the August commissary hacks but that the investigation is still in progress.

路透社無法確認軍方如何作出判定，或是否也在調查其他嫌疑方。新聞網站 Nextgov 上月率先報導，美軍將伊朗視為福利社破壞行動的嫌疑方。Reuters could not establish how the military made its determination or whether it was also looking into other suspects. That the US military considers Iran a suspect in the commissary sabotage campaign was first reported last month by news website Nextgov.

五角大廈週一表示，已「注意到有關一起潛在網路事件的臆測」，但基於安全理由無法提供進一步評論。The Pentagon said on Monday that it was "aware of speculation regarding a potential cyber incident" but it could not offer further comment for security reasons.

據稱，伊朗駭客過去一直難以成功發動會引發大範圍破壞的駭客攻擊。冷凍櫃破壞事件是值得注意的例外，本週也引發美國官員警告，未來可能還會有更多攻擊。Iranian hackers allegedly have struggled previously to pull off hacks that trigger widespread disruption. The freezer sabotage was a notable exception, and this week it sparked warnings from US officials that more could be coming.

網路安全專家此前告訴路透社，這些駭客攻擊看來也很容易得手。許多受害設備背後的公司表示，其中數台已過時，或使用過時韌體，這可能讓駭客容易入侵。The hacks also appeared to have been easy to pull off, cybersecurity experts previously told Reuters. The firm behind many of the stricken units said that several were obsolete or were running outdated firmware, which could have made it easy for hackers to break in.

網路安全公司 Proofpoint 的資深威脅研究員薩赫爾・諾曼（Saher Naumaan）在電子郵件中表示，冷藏設備破壞事件與其說是衡量伊朗網路能力，不如說是反映「這些系統暴露在外的程度」。Saher Naumaan, a senior threat researcher at the cybersecurity company Proofpoint, said in an email that the cold-storage sabotage was less a measure of Iran's cyber prowess than of "how exposed these systems are."

（巴黎 Gabriel Stargardter、華盛頓 Raphael Satter 報導。巴黎 John Irish 補充報導；Chris Sanders 與 Will Dunham 編輯）(Reporting by Gabriel Stargardter in Paris and Raphael Satter in Washington. Additional reporting by John Irish in Paris; editing by Chris Sanders and Will Dunham)