2025年9月5日
China has hacked into American power grids and companies for decades, stealing sensitive files and intellectual property such as chip designs as it seeks to gain an edge over the United States.
几十年来,中国一直在入侵美国的电网和企业,窃取敏感文件和芯片设计等知识产权,以期获得对美国的优势。
But a sweeping cyberattack by a group known as Salt Typhoon is China’s most ambitious yet, experts and officials have concluded after a year of investigating it. It targeted more than 80 countries and may have stolen information from nearly every American, officials said. They see it as evidence that China’s capabilities rival those of the United States and its allies.
但专家和官员在调查一年之后得出结论,一个名为“盐台风”的组织发起的大规模网络攻击是中国迄今为止最具野心的行动。官员们称,它的目标是80多个国家,可能从近乎所有美国人那里窃取了信息。他们认为,这证明中国的能力可以同美国及其盟友匹敌。
The Salt Typhoon attack was a yearslong, coordinated assault that infiltrated major telecommunications companies and others, investigators said in a highly unusual joint statement last week. The range of the attack was far greater than originally understood, and security officials warned that the stolen data could allow Chinese intelligence services to exploit global communication networks to track targets including politicians, spies and activists.
调查人员上周在一份极不寻常的联合声明中表示,“盐台风”袭击是一场持续了数年的协同攻击,渗透到了主要电信公司和其他公司。此次攻击的范围远远超出最初的认知,安全官员警告称,被盗数据可能会让中国情报机构利用全球通信网络追踪包括政界人士、间谍和活动人士在内的目标。
Hackers sponsored by the Chinese government “are targeting networks globally, including, but not limited to, telecommunications, government, transportation, lodging, and military infrastructure networks,” the statement said.
声明称,由中国政府资助的黑客“正以全球网络为目标,包括但不限于电信、政府、交通、住宿和军事基础设施网络”。
British and American officials have described the attack as “unrestrained” and “indiscriminate.” Canada, Finland, Germany, Italy, Japan and Spain were also signatories to the statement, which was part of a name-and-shame effort directed at the Chinese government.
英国和美国官员称之为“肆无忌惮”和“无差别”的攻击。加拿大、芬兰、德国、意大利、日本和西班牙也签署了这份声明,这是针对中国政府的点名谴责行动的一部分。
“I can’t imagine any American was spared given the breadth of the campaign,” said Cynthia Kaiser, a former top official in the F.B.I.’s cyber division, who oversaw investigations into the hacking.
“考虑到这次行动的范围之广,我无法想象有任何美国人能够幸免,”前联邦调查局网络部门高级官员辛西娅·凯泽说,她曾负责对此次黑客事件的调查。
It was unclear whether the Salt Typhoon hack was intended to store ordinary people’s data or if that data was incidentally swept up in the attack. But its scope was broader than previous hacks, in which China more narrowly targeted Westerners working on security or other sensitive government issues, Ms. Kaiser said.
“盐台风”黑客攻击是在蓄意存储普通人的数据,还是这些数据在攻击中意外被窃取,目前尚不清楚。凯泽表示,但这次的攻击范围比以前更广,此前中国主要针对从事安全工作或涉及敏感政府事务的西方人士实施精准攻击。
The Salt Typhoon hack could signal a new era of Chinese cyber capabilities that will test its strategic rivals, including the United States, security experts said. It highlights China’s ambitions for global influence, which were on display on Wednesday at an elaborate military parade in Beijing that featured fighter jets, tanks and thousands of troops marching across Tiananmen Square.
安全专家称,“盐台风”的黑客攻击可能标志着中国网络能力进入了一个新时代,将考验包括美国在内的战略对手。这凸显了中国追求全球影响力的野心——周三在北京举行的盛大阅兵式上,战斗机、坦克和数以千计的士兵在天安门广场列队行进,也展现了这种野心。
“In many ways, Salt Typhoon marks a new chapter,” said Jennifer Ewbank, the former C.I.A. deputy director for digital innovation. A decade ago, she noted, Western allies worried about China’s thefts of trade secrets, personal information and government data, which used more rudimentary techniques.
“在很多方面,‘盐台风’标志着一个新篇章,”前中央情报局副局长、主要负责数字创新的詹妮弗·埃班克说。她指出,十年前,西方盟国担心中国窃取商业机密、个人信息和政府数据,当时中国使用的是相对初级的技术。
“Today, we see patient, state-backed campaigns burrowed deep into the infrastructure of more than 80 countries, characterized by a high level of technical sophistication, patience and persistence,” she added.
“如今,我们看到的是耐心的、由政府支持的行动,深入80多个国家的基础设施,其特点是技术水平精良、很有耐心、坚持不懈,”她说。
The Chinese Embassy in London did not respond to a message seeking comment.
中国驻伦敦大使馆没有回应寻求置评的消息。
中国驻伦敦大使馆。
The statement from Western allies gave the fullest accounting yet of what the F.B.I. has called China’s “cyberespionage campaign.”
这份西方盟国的声明对联邦调查局所称的中国“网络间谍活动”给出了迄今为止最全面的描述。
Investigators linked the Salt Typhoon attack to at least three China-based technology companies that have been operating since at least 2019, but the operation was uncovered only last year. The joint statement said the companies worked for China’s military and civilian intelligence agencies, which carry out foreign operations.
调查人员将“盐台风”攻击与至少三家中国科技公司联系起来,这些公司至少自2019年以来一直在运营,但其行动直到去年才被发现。联合声明称,这些公司为中国负责开展海外行动的军事和民间情报机构工作。
The hackers’ goal was to give Chinese officials the “capability to identify and track their targets’ communications and movements around the world,” the statement said. Among the targets were phones used by prominent politicians, including President Trump and Vice President JD Vance, during their campaign last year. The effort also took aim at Democrats.
声明称,黑客的目的是让中国官员“有能力识别和追踪目标在世界各地的通信和活动”。窃听目标包括特朗普总统和副总统万斯等知名政界人士在去年竞选期间使用的电话。民主党人也遭到攻击。
The attackers stole data from telecommunications and internet service companies, penetrating more than a half dozen U.S. telecommunications companies alone. The hackers exploited old vulnerabilities in the networks, the British authorities said. They also hacked into lodging and transportation companies, among other targets.
攻击者从电信和互联网服务公司窃取数据,仅美国就有六家以上的电信公司受到攻击。英国当局表示,黑客利用了网络中的旧漏洞。他们还入侵了住宿和运输公司等目标。
The hackers were able to listen in on telephone conversations and read unencrypted text messages, Senator Mark Warner of Virginia, the top Democrat on the Senate Intelligence Committee, has said.
参议院情报委员会民主党领袖、弗吉尼亚州参议员马克·华纳表示,黑客能够窃听电话交谈,阅读未加密的短信。
The attack built on China’s earlier hacks, said Jamie MacColl, a senior research fellow in cybersecurity at Royal United Services Institute, an analytical group affiliated with the British military. For years, China has collected large data sets, Mr. MacColl said, intending to one day exploit that information.
隶属于英国军方的分析机构皇家联合服务研究所的网络安全高级研究员杰米·麦科尔说,这次攻击建立在中国早期黑客攻击的基础之上。麦科尔表示,多年来,中国收集了大量数据集,打算有朝一日利用这些信息。
“If you’re a cyber power, then it makes sense you would want to compromise the global communications network,” he said.
“如果你是一个网络强国,那么你自然会想去破坏全球通信网络,”他说。
Chinese operators previously targeted American companies such as Marriott International, health insurers and the U.S. Office of Personnel Management, which keeps government security clearance files. In 2021, the Biden administration accused the Chinese government of breaching widely used Microsoft email systems.
这些中国运营者此前针对的是万豪国际等美国公司、医疗保险公司和美国人事管理办公室。2021年,拜登政府指责中国政府入侵了广泛使用的微软电子邮件系统。
Russian state-sponsored hackers have also carried out successful breaches. The U.S. and British governments and their closest allies also have vast spying capabilities. It is not clear how Western countries responded to Salt Typhoon.
俄罗斯政府支持的黑客也曾成功实施过入侵。美国和英国政府及其最亲密的盟友也拥有强大的间谍能力。目前尚不清楚西方国家如何应对“盐台风”。
The operation was “more than a one-off intelligence success for China,” Anne Neuberger, a Biden administration cybersecurity official, wrote recently in Foreign Affairs magazine.
拜登政府的网络安全官员安妮·纽伯格最近在《外交事务》杂志上撰文指出,这次行动“对中国来说不仅仅是一次性的情报胜利”。
“It reflected a deeper, troubling reality,” she wrote, adding, “China is positioning itself to dominate the digital battle space.”
“它反映了令人不安的更深层现实,”她写道,并称,“中国正谋求在数字战场占据主导地位。”