latest and nastiest creations.

最新、最惡名昭彰的犯罪手法

So basically, please don't go and download

基本上，請大家不要去下載

any of the viruses that I show you.

我接下來要給大家看的任何病毒

Some of you might be wondering what a cybersecurity specialist looks like,

在座有些人可能會猜想 網路安全專家的工作是什麼樣子

and I thought I'd give you a quick insight

很快地給大家看一下

into my career so far.

我目前的工作經歷

It's a pretty accurate description.

這是還滿真實的描述

This is what someone that specializes

精通於惡意軟體的人

in malware and hacking looks like.

或是駭客就是長這樣

So today, computer viruses and trojans,

現在，電腦病毒和木馬程式

designed to do everything from stealing data

設計來不只竊取電腦資料

to watching you in your webcam

還透過你的網路攝影機監視你

to the theft of billions of dollars.

甚至盜領數十億美元

Some malicious code today goes as far

現在有些惡意代碼已經能夠

as targeting power, utilities and infrastructure.

攻擊能源、公共事業及基礎建設

Let me give you a quick snapshot

很快地給大家看一下

of what malicious code is capable of today.

現在惡意代碼能辦到的事

Right now, every second, eight new users

此時此刻，每秒就有八位

are joining the Internet.

新的網路使用者加入

Today, we will see 250,000 individual new computer viruses.

現在，我們就有 25 萬種新的電腦病毒

We will see 30,000 new infected websites.

還有三萬個剛中毒的網站

And, just to kind of tear down a myth here,

然後在這裡稍微打破大家的迷思

lots of people think that when you get infected

很多人以為電腦中毒

with a computer virus, it's because you went to a porn site.

是因為上了色情網站

Right? Well, actually, statistically speaking,

對吧？事實上，根據數據顯示

if you only visit porn sites, you're safer.

如果你只上色情網站，你還比較安全

People normally write that down, by the way. (Laughter)

順便一提，大家通常會把這記下來 （笑聲）

Actually, about 80 percent of these

其實，大約有 80% 的病毒來源

are small business websites getting infected.

是被感染的小企業網站

Today's cybercriminal, what do they look like?

現在的網路犯罪者是什麼樣子呢？

Well, many of you have the image, don't you,

很多人都會想到類似的畫面，對吧？

of the spotty teenager sitting in a basement,

滿臉雀斑的青少年窩在地下室裡

hacking away for notoriety.

為了成為惡名昭彰的駭客，入侵他人電腦

But actually today, cybercriminals

但事實上，現在的網路犯罪者

are wonderfully professional and organized.

有驚人的專業力和組織性

In fact, they have product adverts.

其實，他們甚至還有產品廣告

You can go online and buy a hacking service

你可以上網購買入侵電腦的服務

to knock your business competitor offline.

以離線狀態打擊你的商業對手

Check out this one I found.

一起看看我發現的這則廣告

(Video) Man: So you're here for one reason,

（影片）「你會在這裡只有一個理由

and that reason is

那個理由就是

because you need your business competitors,

因為你要讓你商業上的競爭者

rivals, haters, or whatever the reason is, or who,

敵人、憎恨的人 不管出於什麼理由，要針對什麼人

they are to go down.

你要打敗他們

Well you, my friend, you've came to the right place.

各位兄弟們，你們來對地方了

If you want your business competitors to go down,

如果你要打敗你的競爭對手

well, they can.

你可以辦的到

If you want your rivals to go offline, well, they will.

你要對手無法連線，他們就會被迫離線

Not only that, we are providing a short-term-to-long-term

不只如此，我們還提供短期到長期的

DDOS service or scheduled attack,

分散式阻斷服務攻擊或是預定攻擊

starting five dollars per hour for small personal websites

個人的小型網站每小時五塊美金

to 10 to 50 dollars per hour.

到每小時十塊、五十塊美金。」

James Lyne: Now, I did actually pay

我真的有付過錢

one of these cybercriminals to attack my own website.

請其中一位網路犯罪者 來攻擊我自己的網站

Things got a bit tricky when I tried to expense it at the company.

我試著要跟公司申請攻擊費時 事情變得有點棘手

Turns out that's not cool.

結果並不如意

But regardless, it's amazing how many products

但不管怎樣，現在那麼多產品和服務 都受到網路犯罪者的威脅

and services are available now to cybercriminals.

涵蓋範圍非常可觀

For example, this testing platform,

舉例來說，這個測試平台

which enables the cybercriminals

可以讓網路犯罪者

to test the quality of their viruses

在散播病毒到世界各地之前

before they release them on the world.

測試他們病毒的品質

For a small fee, they can upload it

只要花一筆小錢，他們就能上傳病毒

and make sure everything is good.

並確保一切順利

But it goes further.

但現在不只如此

Cybercriminals now have crime packs

網路犯罪者現在還有犯罪套件

with business intelligence reporting dashboards

能利用圖表上顯示的商業智慧數據

to manage the distribution of their malicious code.

來管理惡意代碼的散佈

This is the market leader in malware distribution,

這是散佈惡意軟體的市場領導者

the Black Hole Exploit Pack,

「黑洞漏洞攻擊套件」

responsible for nearly one third of malware distribution

在前幾季，有將近三分之一的惡意軟體散佈

in the last couple of quarters.

是由其造成

It comes with technical installation guides,

套件裡包含技術上的安裝說明

video setup routines,

視頻安裝的例行程序

and get this, technical support.

還有，技術上的支持

You can email the cybercriminals and they'll tell you

你可以寄電子郵件給網路犯罪者 他們會告訴你

how to set up your illegal hacking server.

如何架設你的非法駭客伺服器

So let me show you what malicious code looks like today.

給大家看一下現在的惡意代碼是什麼樣子

What I've got here is two systems,

這裡有兩套系統

an attacker, which I've made look all Matrix-y and scary,

一個是攻擊者 我已經把它設計成嚇人的矩陣模型

and a victim, which you might recognize from home or work.

一個是被害者 就是平常我們在家裡或職場上看到的

Now normally, these would be on different sides

正常來說，這兩者會在地球的兩邊

of the planet or of the Internet,

或是網路的兩端

but I've put them side by side

但我把它們放在一起作比較

because it makes things much more interesting.

能夠呈現更有趣的對比

Now, there are many ways you can get infected.

你的電腦會中毒，有很多種可能

You will have come in contact with some of them.

你可能接觸過其中某些病毒

Maybe some of you have received an email

也許你們當中，有人已經收過電子郵件

that says something like, "Hi, I'm a Nigerian banker,

內容是：「嗨，我是奈及利亞的銀行家

and I'd like to give you 53 billion dollars

我想要給你 530 億美元

because I like your face."

因為我喜歡你的長相。」

Or funnycats.exe, which rumor has it

或是收到 funnycats.exe，聽說它

was quite successful in China's recent campaign against America.

在中國最近反抗美國的活動中 執行相當成功

Now there are many ways you can get infected.

電腦中毒有很多種管道

I want to show you a couple of my favorites.

我想給大家看一些我最喜歡的案例

This is a little USB key.

這是一個小小的隨身碟

Now how do you get a USB key to run in a business?

你要如何讓公司插入隨身碟呢？

Well, you could try looking really cute.

你可以用很可愛的方式

Awww.

喔~

Or, in my case, awkward and pathetic.

或者，我自己是用楚楚可憐的方式

So imagine this scenario: I walk into one of your businesses,

想像一下這個場景，我走進你們公司

looking very awkward and pathetic, with a copy of my C.V.

看起來很膽小無助地拿著一份

which I've covered in coffee,

被咖啡濺濕的履歷表

and I ask the receptionist to plug in this USB key

我請櫃台人員插入這個隨身碟

and print me a new one.

幫我印一份新的

So let's have a look here on my victim computer.

我們來看看被害者電腦的情形

What I'm going to do is plug in the USB key.

我現在要插入隨身碟

After a couple of seconds,

幾秒鐘後

things start to happen on the computer on their own,

電腦開始自己跑出一些東西

usually a bad sign.

通常是不好的兆頭

This would, of course, normally happen

當然這種現象，通常只發生

in a couple of seconds, really, really quickly,

在幾秒鐘之內，速度非常非常快

but I've kind of slowed it down

但我把速度稍微放慢

so you can actually see the attack occurring.

讓大家看清楚，電腦是怎麼遭受攻擊

Malware is very boring otherwise.

不然惡意軟體其實滿無聊的

So this is writing out the malicious code,

現在電腦正在寫惡意代碼

and a few seconds later, on the left-hand side,

幾秒鐘後，左手邊

you'll see the attacker's screen get some interesting new text.

你可以看到攻擊者的電腦出現有趣的符號

Now if I place the mouse cursor over it,

假如現在我把游標移到上面

this is what we call a command prompt,

這個叫做命令提示字元視窗

and using this we can navigate around the computer.

利用它，就能隨意控制電腦了

We can access your documents, your data.

我們可以獲取你的文件、資料

You can turn on the webcam.

你可以打開網路攝影機

That can be very embarrassing.

就會變得很尷尬

Or just to really prove a point,

為了證明我的觀點

we can launch programs like my personal favorite,

我們可以打開一個程式，像是我最愛的

the Windows Calculator.

Windows 計算機

So isn't it amazing how much control

所以攻擊者能輕易控制電腦

the attackers can get with such a simple operation?

不是很驚人嗎？

Let me show you how most malware

我讓大家看看現在的惡意軟體

is now distributed today.

是如何散佈出去的

What I'm going to do is open up a website

我現在要打開我架的

that I wrote.

網站

It's a terrible website. It's got really awful graphics.

這網站很爛，製圖滿差的

And it's got a comments section here

這裡有個留言板

where we can submit comments to the website.

可以在網站上留下評論

Many of you will have used something a bit like this before.

很多人都用過這種留言板

Unfortunately, when this was implemented,

不幸地，執行這個動作後

the developer was slightly inebriated

版主有點得意忘形

and managed to forget

試圖遺忘

all of the secure coding practices he had learned.

所有他學過的安全編碼

So let's imagine that our attacker,

想像一下我們的攻擊者

called Evil Hacker just for comedy value,

為了笑果，我們將其稱為「邪惡駭客」

inserts something a little nasty.

他在網頁中置入了棘手的東西

This is a script.

這是一串程式語言

It's code which will be interpreted on the webpage.

是一種網頁可讀取的編碼

So I'm going to submit this post,

我現在要送出這則留言

and then, on my victim computer,

接著，我要打開

I'm going to open up the web browser

受害者電腦的網頁瀏覽器

and browse to my website,

上我的網站

www.incrediblyhacked.com.

www.incrediblyhacked.com

Notice that after a couple of seconds,

注意看，幾秒鐘後

I get redirected.

網站被轉出

That website address at the top there,

從網站上方的網址

which you can just about see, microshaft.com,

可以看到 microshaft.com

the browser crashes as it hits one of these exploit packs,

網站在碰到這些攻擊套件後就當機了

and up pops fake antivirus.

然後出現冒牌的防毒軟體

This is a virus pretending to look like antivirus software,

這種病毒假裝自己是防毒軟體

and it will go through and it will scan the system,

它會仔細瀏覽並掃描整個系統

have a look at what its popping up here.

看一下這裡出現什麼

It creates some very serious alerts.

出現了嚴重的警告

Oh look, a child porn proxy server.

看，兒童色情網代理伺服器

We really should clean that up.

我們真的應該把它清乾淨

What's really insulting about this is

真的很羞辱人的部分

not only does it provide the attackers with access to your data,

不只是它賦予了攻擊者竊取資料的能力

but when the scan finishes, they tell you

更是因為當掃描結束後，它會顯示

in order to clean up the fake viruses,

為了清理假的病毒

you have to register the product.

你必須要申請產品註冊

Now I liked it better when viruses were free.

現在我更喜歡免費的病毒了

(Laughter)

（笑聲）

People now pay cybercriminals money

現在大家付錢請網路犯罪者

to run viruses,

來跑病毒

which I find utterly bizarre.

我覺得很奇怪

So anyway, let me change pace a little bit.

不管怎樣，現在我要稍微換個步調

Chasing 250,000 pieces of malware a day

一天要追趕 25 萬個惡意軟體

is a massive challenge,

是很大的挑戰

and those numbers are only growing

而這樣的數據只會不斷上升

directly in proportion to the length of my stress line, you'll note here.

你可以看到，它和我皺紋的長度成正比

So I want to talk to you briefly

所以我要簡短的跟大家談談

about a group of hackers we tracked for a year

我們追蹤了一年的駭客團隊

and actually found --

而且我們確實找到他們

and this is a rare treat in our job.

對我們的工作來說，這是很難得的事

Now this was a cross-industry collaboration,

這是一個跨企業的合作研究

people from Facebook, independent researchers,

成員有臉書的網友、獨立研究員

guys from Sophos.

以及 Sophos （防毒軟體公司）的人員

So here we have a couple of documents

這裡有一些文件

which our cybercriminals had uploaded

是網路犯罪者

to a cloud service, kind of like Dropbox or SkyDrive,

上傳到類似 Dropbox 或 SkyDrive 的雲端

like many of you might use.

就像你們可能使用過的雲端服務

At the top, you'll notice a section of source code.

上方，你們可以看到原始碼的部分

What this would do is send the cybercriminals

它的功能是每天傳送訊息

a text message every day telling them how much money

給網路犯罪者，告知他們

they'd made that day,

他們當天賺了多少錢

so a kind of cybercriminal billings report, if you will.

所以你可以說它 有點像網路犯罪者的營業額報告

If you look closely, you'll notice a series

如果你仔細看，你會注意到有一串

of what are Russian telephone numbers.

俄羅斯的電話號碼

Now that's obviously interesting,

顯然現在事情越來越有趣了

because that gives us a way of finding our cybercriminals.

因為它提供我們找出網路犯罪者的管道

Down below, highlighted in red,

下方，紅色部分

in the other section of source code,

另一部分的原始碼

is this bit "leded:leded."

是位元 "leded:leded"

That's a username,

那是使用者名稱

kind of like you might have on Twitter.

有點像你在推特上的名字

So let's take this a little further.

現在我們更進一步來看

There are a few other interesting pieces

還有一些網路犯罪者所上傳的

the cybercriminals had uploaded.

有趣的東西

Lots of you here will use smartphones

在場的各位，大部分都會在會議時

to take photos and post them from the conference.

用智慧型手機拍照上傳

An interesting feature of lots of modern smartphones

而大部分的智慧型手機都有一項特色

is that when you take a photo,

當你拍照時

it embeds GPS data about where that photo was taken.

手機會匯入有關拍攝地點的 GPS 資料

In fact, I've been spending a lot of time

事實上，最近我大部分的時間

on Internet dating sites recently,

都花在交友網站上

obviously for research purposes,

當然是為了研究目的

and I've noticed that about 60 percent

而我注意到交友網站上

of the profile pictures on Internet dating sites

大約 60% 的個人照

contain the GPS coordinates of where the photo was taken,

提供了拍攝地點的 GPS 服務

which is kind of scary

這其實有點可怕

because you wouldn't give out your home address

因為你不會給陌生人

to lots of strangers,

你家的住址

but we're happy to give away our GPS coordinates

但我們卻樂意分享我們的位置

to plus or minus 15 meters.

讓 15 公里外的人知道

And our cybercriminals had done the same thing.

網路犯罪者也是做同樣的事情

So here's a photo which resolves to St. Petersburg.

這是在聖彼得堡的照片

We then deploy the incredibly advanced hacking tool.

我們部屬了非常先進的駭客工具

We used Google.

也就是 Google

Using the email address, the telephone number

利用電子郵件、電話號碼

and the GPS data, on the left you see an advert

以及 GPS 數據，左手邊可以看到

for a BMW that one of our cybercriminals is selling,

網路犯罪者在宣傳的 BMW 廣告

on the other side an advert for the sale of sphynx kittens.

另一邊可以看到賣斯芬克斯貓的廣告

One of these was more stereotypical for me.

其中一個對我來說比較常見

A little more searching, and here's our cybercriminal.

進一步研究之後，找到這位網路犯罪者

Imagine, these are hardened cybercriminals

想像一下，這些頑固的網路犯罪者

sharing information scarcely.

幾乎不分享資訊

Imagine what you could find

想像一下，你可以在現場

about each of the people in this room.

每個人身上找出什麼資訊

A bit more searching through the profile

透過個人資料進一步搜尋

and there's a photo of their office.

這是他們辦公室的照片

They were working on the third floor.

他們在三樓工作

And you can also see some photos

你可以從他們的企業夥伴那裡

from his business companion

看到更多照片

where he has a taste in a certain kind of image.

在那，他帶有某種形象的特徵

It turns out he's a member of the Russian Adult Webmasters Federation.

結果發現他是 俄羅斯成人網路管理聯盟的一員

But this is where our investigation starts to slow down.