FSOCIETY 聲稱的 BitFinex 駭客攻擊結果是一個騙局

FSOCIETY 聲稱已入侵 BitFinex，引發用戶恐慌。安全研究人員最初證實了這次駭客攻擊，但 BitFinex 首席技術長 Paolo Ardoino 提出了質疑。當用戶質疑 FSOCIETY 的可信度時，Ardoino 澄清說，洩漏的資料源自於先前的 CoinMarketCap 違規事件，而不是 BitFinex，向用戶保證他們的資料仍然安全。

FSOCIETY's Alleged BitFinex Hack: A Saga of Panic, Misinformation, and Relief

FSOCIETY 涉嫌 BitFinex 駭客攻擊：恐慌、錯誤訊息和救濟的傳奇

On April 25, the infamous hacking group FSOCIETY sent shockwaves through the cryptocurrency community by claiming to have compromised over 400,000 BitFinex accounts, amassing a staggering 2.5 terabytes of user data. This audacious announcement sparked widespread panic among BitFinex users, who feared for the safety of their funds and personal information.

4 月 25 日，臭名昭著的駭客組織 FSOCIETY 聲稱已經洩露了超過 40 萬個 BitFinex 帳戶，積累了驚人的 2.5 TB 用戶數據，在加密貨幣社區引起了軒然大波。這一大膽的聲明引發了 BitFinex 用戶的廣泛恐慌，他們擔心自己的資金和個人資訊的安全。

FSOCIETY, named after the enigmatic hacker collective in the hit TV show Mr. Robot, has a history of targeting high-profile organizations. Their dark web homepage boasted of successful hacks against several victims, including crypto exchanges. To substantiate their claim against BitFinex, they released a text file containing a partial dump of usernames and plaintext passwords.

FSOCIETY 以熱門電視節目《機器人先生》中神秘的駭客集體命名，有著針對知名組織的歷史。他們的暗網主頁誇耀了針對多個受害者的成功駭客攻擊，其中包括加密貨幣交易所。為了證實他們對 BitFinex 的指控，他們發布了一個文字文件，其中包含用戶名和明文密碼的部分轉儲。

The hacking group's ultimatum sent the BitFinex user base into a frenzy. Security researchers scrambled to validate the leaked passwords, triggering 2FA prompts and urging users to change their credentials. The threat of exposed KYC details further exacerbated the panic, as users grappled with the potential consequences of their personal information being made public.

駭客組織的最後通牒讓 BitFinex 用戶群陷入瘋狂。安全研究人員爭先恐後地驗證洩漏的密碼，觸發 2FA 提示並敦促用戶更改憑證。隨著用戶努力應對個人資訊被公開的潛在後果，暴露 KYC 詳細資訊的威脅進一步加劇了恐慌。

Amidst the chaos, Paolo Ardoino, BitFinex's CTO and CEO of Tether, stepped forward to cast doubt on the legitimacy of the hack. In a series of tweets, Ardoino meticulously deconstructed FSOCIETY's claims, providing evidence to dispel the mounting fear.

混亂之中，BitFinex 技術長兼 Tether 執行長 Paolo Ardoino 站出來對此駭客攻擊的合法性提出質疑。在一系列推文中，Ardoino 細緻地解構了 FSOCIETY 的主張，提供了證據來消除日益加劇的恐懼。

Ardoino revealed that the leaked data originated from a separate breach and did not stem from BitFinex's systems. He further clarified that the exchange did not store passwords in plaintext, rendering the alleged dump of plaintext passwords invalid. Notably, Ardoino emphasized that if any genuine BitFinex information had been compromised, the hackers would have reached out through the company's established channels, including its bug bounty program, customer support, email, or Twitter.

Ardoino 透露，洩漏的資料源自於單獨的違規行為，並非源自 BitFinex 的系統。他進一步澄清說，該交易所並未以明文形式儲存密碼，因此所謂的明文密碼轉儲無效。值得注意的是，Ardoino 強調，如果任何真實的 BitFinex 資訊被洩露，駭客將透過該公司的既定管道進行接觸，包括其錯誤賞金計畫、客戶支援、電子郵件或 Twitter。

Shinoji Research, a security firm, corroborated Ardoino's analysis, linking the leaked emails to the recent CoinMarketCap breach. This finding further undermined FSOCIETY's claims, as the compromised accounts had a significant presence on HaveIBeenPwned, a website that tracks email breaches.

保全公司 Shinoji Research 證實了 Ardoino 的分析，將洩漏的電子郵件與最近的 CoinMarketCap 外洩事件連結起來。這項發現進一步駁斥了 FSOCIETY 的說法，因為受感染的帳戶在追蹤電子郵件外洩的網站 HaveIBeenPwned 上佔有重要地位。

Ardoino's meticulous dissection of FSOCIETY's claims gradually calmed the storm of panic. BitFinex users, initially thrown into disarray, began to regain their composure as the true nature of the situation emerged.

阿多伊諾對FSOCIETY說法的細緻剖析逐漸平息了恐慌風暴。 BitFinex 用戶最初陷入混亂，但隨著情況的真相浮出水面，他們開始恢復冷靜。

In a surprising twist, Ardoino unveiled FSOCIETY's ulterior motive: promoting their ransomware tool and generating profits for subscribers. "If they truly hacked BitFinex," Ardoino questioned, "do they really need to sell stuff for $299?"

令人驚訝的是，Ardoino 揭露了 FSOCIETY 的不可告人的動機：推廣他們的勒索軟體工具並為訂閱者創造利潤。 “如果他們真的入侵了 BitFinex，”Ardoino 質疑道，“他們真的需要以 299 美元的價格出售東西嗎？”

The alleged BitFinex hack serves as a stark reminder of the importance of critical thinking, thorough research, and staying informed through official communication channels in the face of cybersecurity threats. It underscores the need to avoid panic and misinformation and to rely on credible sources for accurate information.

所謂的 BitFinex 駭客事件清楚地提醒我們，面對網路安全威脅時，批判性思維、徹底研究以及透過官方溝通管道了解情況的重要性。它強調需要避免恐慌和錯誤訊息，並依賴可靠來源來獲取準確資訊。

The episode also highlights the ongoing battle against cybercrime and the relentless efforts of hackers to exploit vulnerabilities. Crypto exchanges and users must remain vigilant, implementing robust security measures and exercising caution in safeguarding their digital assets.

這一集還凸顯了持續不斷的打擊網路犯罪的鬥爭以及駭客利用漏洞的不懈努力。加密貨幣交易所和用戶必須保持警惕，實施強有力的安全措施並謹慎保護其數位資產。

While the panic surrounding the alleged BitFinex hack has subsided, it has left an imprint on the cryptocurrency community, underscoring the need for heightened awareness and proactive measures to combat cyber threats. As technology advances and the digital landscape evolves, vigilance and collaboration will be crucial to navigate the ever-changing cybersecurity terrain.

雖然圍繞所謂的 BitFinex 駭客事件的恐慌已經消退，但它在加密貨幣社群留下了印記，強調需要提高意識並採取積極措施來應對網路威脅。隨著技術的進步和數位環境的發展，保持警惕和協作對於駕馭不斷變化的網路安全領域至關重要。