朝鮮數字欺詐針對西方公司

隨著世界各地的分析師和政府繼續引起人們對朝鮮數字欺詐的關注，研究人員本週發布了1000封電子郵件地址

Researchers this week published 1,000 email addresses they claim are linked to North Korean IT worker scams perpetrated against Western companies, along with photos of people allegedly involved in the fraud.

研究人員本週發布了他們聲稱的1,000封電子郵件地址與對西方公司的朝鮮IT工人騙局以及涉嫌參與欺詐的人們的照片有關。

The researchers, who work for cybersecurity firm CCChain, said they were able to identify 70 North Korean IT workers who had set up fake LinkedIn profiles to scam Western companies. The researchers said they also collected photos of the IT workers and examples of the scams they perpetrated.

在網絡安全公司CCCHAIN工作的研究人員說，他們能夠確定70名朝鮮的IT工人，他們已經將假的LinkedIn個人資料設置為騙局西方公司。研究人員說，他們還收集了IT工作人員的照片，並收集了他們犯下的騙局的例子。

The researchers said they began their investigation after noticing an increase in reports of North Korean digital fraud. Analysts and governments around the world have been sounding the alarm about the threat posed by North Korean cybercrime, which researchers say is used to fund the totalitarian state’s nuclear and missile programs.

研究人員說，他們注意到北朝鮮數字欺詐的報告有所增加後，他們開始了調查。世界各地的分析師和政府一直在向朝鮮網絡犯罪構成的威脅發出警報，研究人員說，這是為了資助極權國家的核和導彈計劃。

One common scam involves North Korean IT workers posing as executives at legitimate companies and contacting employees at Western firms. The IT workers then try to scam the employees into transferring money to bank accounts controlled by the North Koreans.

一個常見的騙局涉及在合法公司擔任高管並與西方公司的員工聯繫的朝鮮IT工人。然後，IT工人試圖將員工騙取將資金轉移到由朝鮮人控制的銀行帳戶中。

The researchers said they were able to track the IT workers' activities online and identify the email addresses they used to communicate with their victims. They also collected photos of the IT workers from their LinkedIn profiles and other social media accounts.

研究人員說，他們能夠在線跟踪IT工作人員的活動，並確定他們與受害者交流的電子郵件地址。他們還從LinkedIn個人資料和其他社交媒體帳戶中收集了IT工作人員的照片。

The researchers said they hope that their findings will help to raise awareness of the threat posed by North Korean digital fraud and put pressure on the regime to stop it.

研究人員說，他們希望他們的發現將有助於提高人們對朝鮮數字欺詐構成的威脅的認識，並向政權施加壓力以阻止它。

"We believe that it is important to continue to shed light on the activities of the North Korean government and to hold them accountable for their actions," the researchers said in a statement.

研究人員在一份聲明中說：“我們認為，重要的是要繼續闡明朝鮮政府的活動並使他們對自己的行為負責。”

The researchers' findings were reported by cybersecurity news outlet Zscaler.

網絡安全新聞媒體Zscaler報告了研究人員的發現。

In other news, marketplace and platform Xinbi Guarantee, which was used by Chinese-speaking crypto scammers for laundering money, grew into an $8.4 billion hub before a crackdown by messaging app Telegram this week.

在其他新聞中，市場和平台Xinbi保證是通過說中文的加密騙子用於洗錢的，在本週通過消息傳遞應用程序電報的鎮壓之前，它逐漸成為84億美元的樞紐。

The platform was shut down after Telegram moved to shut down a wave of crypto scam operations that were siphoning billions of dollars from users. The takedown included prominent names like Haowang Guarantee, a black market known for enabling $27 billion in transactions.

電報移動以關閉一波加密騙局操作後，該平台被關閉，這些騙局從用戶那裡汲取了數十億美元。拆分包括著名的名字，例如Haowang保證，這是一個以270億美元的交易而聞名的黑市。

The move by Telegram comes as the messaging app faces increasing pressure to do more to combat the scourge of cryptocurrency scams.

隨著消息傳遞應用程序面臨越來越多的壓力，以應對加密貨幣騙局的禍害。

The scammers would create fake investment opportunities to fleece users out of cryptocurrency, which they would then launder through platforms like Xinbi Guarantee. The scammers were able to operate with impunity for years, but their activities finally came to light in recent months as several high-profile scams were reported in the media.

詐騙者將創造虛假的投資機會，使用戶擺脫加密貨幣，然後通過XINBI保證這樣的平台洗錢。騙子能夠不受懲罰多年，但由於媒體上有幾次引人注目的騙局，他們的活動終於揭露了。

The scammers were also able to use their wealth to influence the cryptocurrency community and get preferential treatment from exchanges and other institutions. For example, one scam known as "Plus Token" was able to raise billions of dollars from retail investors before collapsing in 2019.

騙子還能夠利用自己的財富來影響加密貨幣社區，並從交流和其他機構獲得優惠待遇。例如，在2019年倒閉之前，一個被稱為“ Plus Token”的騙局能夠從零售投資者那裡籌集數十億美元。

The crackdown by Telegram is a significant development in the ongoing battle against cryptocurrency scams. It remains to be seen what impact the takedown will have on the scammers' activities. However, the fact that Telegram was willing to take such drastic measures is a clear indication that the messaging app is taking the problem seriously.

電報的鎮壓是與加密貨幣騙局的持續戰鬥中的重大發展。距離騙子對騙子活動的影響還有待觀察。但是，Telegram願意採取如此嚴厲的措施這一事實清楚地表明，消息傳遞應用程序正在認真對待問題。

And if you’re looking for more coverage of the legal and regulatory issues impacting the online world, be sure to check out WIRED’s full coverage here.

而且，如果您正在尋找對影響在線世界的法律和監管問題的更多報導，請務必在此處查看Wired的全部覆蓋範圍。

The acting director of the Consumer Financial Protection Bureau is quietly eliminating a planned initiative to more tightly regulate the sale of Americans’ sensitive personal data.

消費者金融保護局的代理總監正在悄悄地消除一項計劃的計劃，以更加嚴格地調節美國人敏感個人數據的銷售。

The move by acting CFPB Director Russell Vought comes as Congress has largely failed to pass federal privacy legislation that would set clear limits on how companies collect, use, and sell consumers’ data. It also arrives amid a burgeoning threat posed by deepfake and generative AI scams.

代理CFPB董事羅素·沃奇（Russell Vought）的舉動是因為國會在很大程度上未能通過聯邦隱私立法，這將對公司如何收集，使用和出售消費者的數據設定明確的限制。它也出現在深層捕撈和生成AI騙局帶來的新興威脅中。

CFPB had originally launched the initiative last year in response to increasingly far reaching and reckless behavior by data brokers.

CFPB最初是為了響應數據經紀人越來越遙遠的行為而發起了該計劃。

The CFPB unveiled plans to propose new rules that year that would restrict the types of personal data that could be sold and require companies to obtain consumers’ consent before selling their data. The agency also planned to limit the types of inferences that data brokers could make about consumers based on the data they collect.

CFPB揭幕了那一年提出新規則的計劃，該計劃將限制可以出售的個人數據類型，並要求公司在出售數據之前獲得消費者同意。該機構還計劃根據收集的數據限制數據經紀人可以對消費者進行的推論類型。

But Vought decided to axe the initiative to propose new data privacy rules this year, according to a CFPB spokesperson. The spokesperson said that Vought made the decision because he feels that Congress should be the one to set federal privacy standards.

CFPB發言人說，但Vought決定將這項倡議制定為今年提出新的數據隱私規則。發言人說，Vought做出了決定，因為他認為國會應該是製定聯邦隱私標準的人。

The move is likely to enrage consumer advocates, who have been pushing for CFPB to take action to regulate the data privacy market. They argue that data brokers are engaging in unfair and deceptive practices, such as selling consumers’ personal data without their consent and making false or misleading claims about the data they sell.

此舉可能會激怒消費者倡導者，他們一直在推動CFPB採取行動以規範數據隱私市場。他們認為，數據經紀人正在從事不公平和欺騙性的做法，例如未經同意就出售消費者的個人數據，並對他們出售的數據提出虛假或誤導性的主張。

“Congress has largely failed to act on federal privacy legislation that would set clear limits on how companies collect, use, and sell our personal data,” consumer groups wrote in January to House leadership. “This failure has left a vacuum that is being filled by an opaque and largely unregulated market in personal data.”

“國會在很大程度上未能對聯邦隱私立法採取行動，這將對公司如何收集，使用和出售我們的個人數據設定明確的限制，”消費者團體在一月份寫道。 “這種失敗使一個真空吸引了個人數據中不透明且在很大程度上不受監管的市場所填補的真空吸塵器。”

The CFPB is charged with enforcing federal consumer financial laws, including the Fair Credit Reporting Act

CFPB被控執行聯邦消費者金融法，包括《公平信用報告法》