朝鲜数字欺诈针对西方公司

随着世界各地的分析师和政府继续引起人们对朝鲜数字欺诈的关注，研究人员本周发布了1000封电子邮件地址

Researchers this week published 1,000 email addresses they claim are linked to North Korean IT worker scams perpetrated against Western companies, along with photos of people allegedly involved in the fraud.

研究人员本周发布了他们声称的1,000封电子邮件地址与对西方公司的朝鲜IT工人骗局以及涉嫌参与欺诈的人们的照片有关。

The researchers, who work for cybersecurity firm CCChain, said they were able to identify 70 North Korean IT workers who had set up fake LinkedIn profiles to scam Western companies. The researchers said they also collected photos of the IT workers and examples of the scams they perpetrated.

在网络安全公司CCCHAIN工作的研究人员说，他们能够确定70名朝鲜的IT工人，他们已经将假的LinkedIn个人资料设置为骗局西方公司。研究人员说，他们还收集了IT工作人员的照片，并收集了他们犯下的骗局的例子。

The researchers said they began their investigation after noticing an increase in reports of North Korean digital fraud. Analysts and governments around the world have been sounding the alarm about the threat posed by North Korean cybercrime, which researchers say is used to fund the totalitarian state’s nuclear and missile programs.

研究人员说，他们注意到北朝鲜数字欺诈的报告有所增加后，他们开始了调查。世界各地的分析师和政府一直在向朝鲜网络犯罪构成的威胁发出警报，研究人员说，这是为了资助极权国家的核和导弹计划。

One common scam involves North Korean IT workers posing as executives at legitimate companies and contacting employees at Western firms. The IT workers then try to scam the employees into transferring money to bank accounts controlled by the North Koreans.

一个常见的骗局涉及在合法公司担任高管并与西方公司的员工联系的朝鲜IT工人。然后，IT工人试图将员工骗取将资金转移到由朝鲜人控制的银行帐户中。

The researchers said they were able to track the IT workers' activities online and identify the email addresses they used to communicate with their victims. They also collected photos of the IT workers from their LinkedIn profiles and other social media accounts.

研究人员说，他们能够在线跟踪IT工作人员的活动，并确定他们与受害者交流的电子邮件地址。他们还从LinkedIn个人资料和其他社交媒体帐户中收集了IT工作人员的照片。

The researchers said they hope that their findings will help to raise awareness of the threat posed by North Korean digital fraud and put pressure on the regime to stop it.

研究人员说，他们希望他们的发现将有助于提高人们对朝鲜数字欺诈构成的威胁的认识，并向政权施加压力以阻止它。

"We believe that it is important to continue to shed light on the activities of the North Korean government and to hold them accountable for their actions," the researchers said in a statement.

研究人员在一份声明中说：“我们认为，重要的是要继续阐明朝鲜政府的活动并使他们对自己的行为负责。”

The researchers' findings were reported by cybersecurity news outlet Zscaler.

网络安全新闻媒体Zscaler报告了研究人员的发现。

In other news, marketplace and platform Xinbi Guarantee, which was used by Chinese-speaking crypto scammers for laundering money, grew into an $8.4 billion hub before a crackdown by messaging app Telegram this week.

在其他新闻中，市场和平台Xinbi保证是通过说中文的加密骗子用于洗钱的，在本周通过消息传递应用程序电报的镇压之前，它逐渐成为84亿美元的枢纽。

The platform was shut down after Telegram moved to shut down a wave of crypto scam operations that were siphoning billions of dollars from users. The takedown included prominent names like Haowang Guarantee, a black market known for enabling $27 billion in transactions.

电报移动以关闭一波加密骗局操作后，该平台被关闭，这些骗局从用户那里汲取了数十亿美元。拆分包括著名的名字，例如Haowang保证，这是一个以270亿美元的交易而闻名的黑市。

The move by Telegram comes as the messaging app faces increasing pressure to do more to combat the scourge of cryptocurrency scams.

随着消息传递应用程序面临越来越多的压力，以应对加密货币骗局的祸害。

The scammers would create fake investment opportunities to fleece users out of cryptocurrency, which they would then launder through platforms like Xinbi Guarantee. The scammers were able to operate with impunity for years, but their activities finally came to light in recent months as several high-profile scams were reported in the media.

诈骗者将创造虚假的投资机会，使用户摆脱加密货币，然后通过XINBI保证这样的平台洗钱。骗子能够不受惩罚多年，但由于媒体上有几次引人注目的骗局，他们的活动终于揭露了。

The scammers were also able to use their wealth to influence the cryptocurrency community and get preferential treatment from exchanges and other institutions. For example, one scam known as "Plus Token" was able to raise billions of dollars from retail investors before collapsing in 2019.

骗子还能够利用自己的财富来影响加密货币社区，并从交流和其他机构获得优惠待遇。例如，在2019年倒闭之前，一个被称为“ Plus Token”的骗局能够从零售投资者那里筹集数十亿美元。

The crackdown by Telegram is a significant development in the ongoing battle against cryptocurrency scams. It remains to be seen what impact the takedown will have on the scammers' activities. However, the fact that Telegram was willing to take such drastic measures is a clear indication that the messaging app is taking the problem seriously.

电报的镇压是与加密货币骗局的持续战斗中的重大发展。距离骗子对骗子活动的影响还有待观察。但是，Telegram愿意采取如此严厉的措施这一事实清楚地表明，消息传递应用程序正在认真对待问题。

And if you’re looking for more coverage of the legal and regulatory issues impacting the online world, be sure to check out WIRED’s full coverage here.

而且，如果您正在寻找对影响在线世界的法律和监管问题的更多报道，请务必在此处查看Wired的全部覆盖范围。

The acting director of the Consumer Financial Protection Bureau is quietly eliminating a planned initiative to more tightly regulate the sale of Americans’ sensitive personal data.

消费者金融保护局的代理总监正在悄悄地消除一项计划的计划，以更加严格地调节美国人敏感个人数据的销售。

The move by acting CFPB Director Russell Vought comes as Congress has largely failed to pass federal privacy legislation that would set clear limits on how companies collect, use, and sell consumers’ data. It also arrives amid a burgeoning threat posed by deepfake and generative AI scams.

代理CFPB董事罗素·沃奇（Russell Vought）的举动是因为国会在很大程度上未能通过联邦隐私立法，这将对公司如何收集，使用和出售消费者的数据设定明确的限制。它也出现在深层捕捞和生成AI骗局带来的新兴威胁中。

CFPB had originally launched the initiative last year in response to increasingly far reaching and reckless behavior by data brokers.

CFPB最初是为了响应数据经纪人越来越遥远的行为而发起了该计划。

The CFPB unveiled plans to propose new rules that year that would restrict the types of personal data that could be sold and require companies to obtain consumers’ consent before selling their data. The agency also planned to limit the types of inferences that data brokers could make about consumers based on the data they collect.

CFPB揭幕了那一年提出新规则的计划，该计划将限制可以出售的个人数据类型，并要求公司在出售数据之前获得消费者同意。该机构还计划根据收集的数据限制数据经纪人可以对消费者进行的推论类型。

But Vought decided to axe the initiative to propose new data privacy rules this year, according to a CFPB spokesperson. The spokesperson said that Vought made the decision because he feels that Congress should be the one to set federal privacy standards.

CFPB发言人说，但Vought决定将这项倡议制定为今年提出新的数据隐私规则。发言人说，Vought做出了决定，因为他认为国会应该是制定联邦隐私标准的人。

The move is likely to enrage consumer advocates, who have been pushing for CFPB to take action to regulate the data privacy market. They argue that data brokers are engaging in unfair and deceptive practices, such as selling consumers’ personal data without their consent and making false or misleading claims about the data they sell.

此举可能会激怒消费者倡导者，他们一直在推动CFPB采取行动以规范数据隐私市场。他们认为，数据经纪人正在从事不公平和欺骗性的做法，例如未经同意就出售消费者的个人数据，并对他们出售的数据提出虚假或误导性的主张。

“Congress has largely failed to act on federal privacy legislation that would set clear limits on how companies collect, use, and sell our personal data,” consumer groups wrote in January to House leadership. “This failure has left a vacuum that is being filled by an opaque and largely unregulated market in personal data.”

“国会在很大程度上未能对联邦隐私立法采取行动，这将对公司如何收集，使用和出售我们的个人数据设定明确的限制，”消费者团体在一月份写道。 “这种失败使一个真空吸引了个人数据中不透明且在很大程度上不受监管的市场所填补的真空吸尘器。”

The CFPB is charged with enforcing federal consumer financial laws, including the Fair Credit Reporting Act

CFPB被控执行联邦消费者金融法，包括《公平信用报告法》