Njengoba kunikezwe lesi sihloko esiphathelene ne-Operation Aurora, yiziphi izinkampani ezazibhekiswe ekuhlaselweni?
Context:I-Operation Aurora kwakuwuchungechunge lokuhlaselwa kwe-inthanethi okwenziwa yizinsongo eziqhubekayo eziphambili ezifana ne-Elderwood Group ezinze eBeijing, eChina, ezinobudlelwano ne-People's Liberation Army. Ukuhlaselwa kwaqala ukudalulwa obala yi-Google ngoJanuwari 12, 2010, kokuthunyelwe kubhulogi, ukuhlaselwa kwaqala maphakathi no-2009 futhi kwaqhubeka ngoDisemba 2009.  Lokhu kuhlasela kwakuhloselwe ezinye izinhlangano eziningi, lapho i-Adobe Systems, i-Akamai Technologies, i-Juniper Networks, ne-Rackspace kuqinisekise obala ukuthi zazihloselwe. Ngokwemibiko yabezindaba, iYahoo, iSymantec, iNorthrop Grumman, iMorgan Stanley, neDow Chemical nayo yayiphakathi kwezinhloso.  Ngenxa yalokhu kuhlaselwa, i-Google ibike kubhulogi yayo ukuthi ihlela ukusebenzisa inguqulo yayo yosesho eChina "ngaphakathi komthetho, uma ikhona", futhi yavuma ukuthi uma lokhu kungenzeki, ingase ihambe eChina futhi ivale amahhovisi ayo aseChina. Imithombo esemthethweni yaseChina yathi lokhu kwakuyingxenye yamasu akhiwa uhulumeni wase-U.S.  Lokhu kuhlasela kwabizwa ngokuthi "uMsebenzi i-Aurora" nguDmitri Alperovitch, oyiPhini Likamongameli Wocwaningo Lwezinsongo enkampanini yezokuphepha kwe-inthanethi i-McAfee. Ucwaningo olwenziwa iMcAfee Labs lwathola ukuthi i-"Aurora" yayiyingxenye yomzila wefayela emshinini womhlaseli owawufakwe kuma-binaries amabili e-malware uMcAfee athi ayehlobene nokuhlaselwa. "Sikholelwa ukuthi leli gama kwakuyigama langaphakathi abahlaseli ababenikeze lo msebenzi", kusho isikhulu sezobuchwepheshe eMcafee uGeorge Kurtz kokuthunyelwe kubhulogi.  NgokukaMcAfee, umgomo oyinhloko walokhu kuhlasela kwakuwukuthola ukufinyelela futhi mhlawumbe nokuguqula izinqolobane zamakhodi emithombo kulezi zinkampani ezisezingeni eliphezulu zobuchwepheshe, ezokuphepha nezokuvikela. U-Alperovitch uthi: "[Ama-SCM] ayevuleke ngokuphelele. "Akekho owake wacabanga ngokuzivikela, nokho lezi kwakuyizinto eziyigugu zalezo zinkampani eziningi ngezindlela eziningi - eziyigugu kakhulu kunanoma iyiphi idatha yezimali noma engakhomba umuntu okungenzeka ukuthi banayo futhi bachitha isikhathi esiningi nomzamo wokuyivikela".  Umlando  Izimbali ezishiywe ngaphandle kwendlunkulu yeGoogle China ngemuva kokumenyezelwa kwayo ukuthi ingase ishiye izwe Ngo-January 12, 2010, i-Google yaveza kubhulogi yayo ukuthi yayihlaselwe ukuhlaselwa kwe-cyber. Le nkampani yathi ukuhlaselwa kwenzeka maphakathi no-December futhi kwavela eChina. I-Google yathi ezinye izinkampani ezingaphezu kwezingu-20 zahlaselwa; eminye imithombo iye yacaphuna ukuthi izinhlangano ezingaphezu kwezingu-34 zazibhekiswe kuzo. Ngenxa yalokhu kuhlaselwa, i-Google yathi ibuyekeza ibhizinisi layo eChina. Ngosuku olufanayo, uNobhala Wezwe wase-United States uHillary Clinton wakhipha isitatimende esifushane esilahla ukuhlaselwa futhi wacela impendulo evela eChina.  NgoJanuwari 13, 2010, i-ejensi yezindaba i-All Headline News yabika ukuthi iCongress yase-United States ihlela ukuphenya izinsolo ze-Google zokuthi uhulumeni waseChina wasebenzisa insizakalo yenkampani ukuhlola izishoshovu zamalungelo abantu.  E-Beijing, izivakashi zashiya izimbali ngaphandle kwehhovisi lakwaGoogle. Nokho, lezi zakhishwa kamuva, unogada waseChina wathi lokhu "kwakuyinkokhelo yezimbali engekho emthethweni". Uhulumeni waseChina akakaze akhiphe impendulo esemthethweni, nakuba isikhulu esingaziwa sathi iChina yayifuna ukwaziswa okwengeziwe ngezinhloso ze-Google.  Abahlaseli abahilelekile Imininingwane eyengeziwe: I-Cyberwarfare yaseChina Ubufakazi obuphathelene nobuchwepheshe obuhlanganisa amakheli e-IP, amagama emikhakha, izimpawu zezinhlelo ezingalungile, nezinye izici, bubonisa ukuthi u-Elderwood wayesemva kokuhlaselwa kwe-Operation Aurora. Iqembu le- "Elderwood" labizwa yi-Symantec (ngemuva kokuguquguquka kwekhodi yomthombo esetshenziswe ngabahlaseli), futhi ibizwa ngokuthi yi- "Beijing Group" yi-Dell Secureworks. Leli qembu lathola ikhodi yomthombo ye-Google, kanye nokufinyelela olwazini mayelana nezishoshovu zaseChina. U-Elderwood uphinde wahlose ezinye izinkampani eziningi emkhakheni wezokuthutha, ezokundiza, izikhali, amandla, ukukhiqiza, ubunjiniyela, i-elekthronikhi, ezezimali kanye nesoftware.  Igama elithi "APT" elibhekisela kubaduni baseChina abahlasela i-Google liyi-APT17.  I-Elderwood igxile ekuhlaseleni nasekungeneleni abahlinzeki bezimboni zokuzivikela abasezingeni lesibili abakhiqiza izingxenye ze-elekthronikhi noma ezomshini zezinkampani zokuzivikela eziphezulu. Lawo mafemu abe "ngamatshe okuqala" ukuze athole izinkontileka zokuvikela ezisezingeni eliphezulu. Enye inqubo yokuhlasela esetshenziswa u-Elderwood ukuthelela amawebhusayithi asemthethweni avakashelwa abasebenzi benkampani ehlosiwe - okubizwa ngokuthi ukuhlaselwa "komgodi wamanzi", njengoba nje nezingonyama zibeka umgodi wamanzi ukuze zithole ukudla. U-Elderwood uthelela lezi zingosi ezingaphephile nge-malware ethunyelwa kuyi-computer echofoza kule ndawo. Ngemva kwalokho, leli qembu lifuna ngaphakathi kunethiwekhi okuxhunywe kuyo ikhompyutha ethintekile, lithole bese lilanda ama-e-mail abaphathi kanye nemibhalo ebalulekile ephathelene nezinhlelo zenkampani, izinqumo, ukuthengwa kwempahla nemiklamo yomkhiqizo.  Ukuhlaziywa kokuhlaselwa Ebhulogi yayo, i-Google yathi ezinye zezinto zayo ezingokwengqondo zebiwe. Kwakusikisela ukuthi abahlaseli babenesithakazelo ekufinyeleleni kuma-akhawunti e-Gmail abaphikisi baseChina. Ngokwe-Financial Times, ama-akhawunti amabili asetshenziswa u-Ai Weiwei ayehlaselwe, okuqukethwe kwawo kwafundwa futhi kwalotshwa; ama-akhawunti akhe asebhange ayephenywa yizikhulu zezokuphepha zombuso ezazithi wayephenywa "ngamacala asolwayo angacacisiwe". Nokho, abahlaseli babekwazi ukubuka imininingwane kuma-akhawunti amabili kuphela futhi leyo mininingwane yayikhawulelwe ezintweni ezinjengomugqa wesihloko nosuku lokwakhiwa kwama-akhawunti.  Ngokushesha ochwepheshe bezokuphepha baphawula ubuciko balokhu kuhlasela. Ezinsukwini ezimbili ngemuva kokuhlaselwa kwaziwa, uMcAfee wabika ukuthi abahlaseli babexhaphaze ukuhlukunyezwa kwe-zero-day (okungaxazululwa futhi okungaziwa ngaphambili kubathuthukisi besistimu okuhlosiwe) ku-Internet Explorer futhi babiza ukuhlaselwa ngokuthi "Operation Aurora". Ngemva kwesonto umbiko kaMcAfee ushicilelwe, iMicrosoft yakhipha isixazululo sale nkinga, futhi yavuma ukuthi yayikwazi ngegebe lezokuphepha elalisetshenziswa kusukela ngoSepthemba. Kwatholakala ezinye izihibe ku-Perforce, isofthiwe yokuhlela ikhodi yomthombo esetshenziswa i-Google ukuphatha ikhodi yabo yomthombo.  I-iDefense Labs yakwaVeriSign yathi ukuhlaselwa kwenziwa "yizisebenzi zombuso waseChina noma abaxhasi bawo".  Ngokwekhebula lezombusazwe elivela e - Embassy yase - U.S. eBeijing, umthombo waseChina wabika ukuthi i - Politburo yaseChina yaqondisa ukuphahlazeka kwezinhlelo zamakhompyutha ze - Google. Lolu daba lwasikisela ukuthi lokhu kuhlasela kwakuyingxenye yomkhankaso ohlanganisiwe owenziwa "izisebenzi zikahulumeni, ochwepheshe bezokuphepha komphakathi kanye nabaphangi be-Internet abaqashwe uhulumeni waseChina". Lo mbiko wasikisela ukuthi kwakuyingxenye yomkhankaso oqhubekayo lapho abahlaseli "beye bangena khona kuma-computer kahulumeni wase-United States nakwezaseNtshonalanga, iDalai Lama namabhizinisi aseMelika kusukela ngo-2002". Ngokombiko we-Guardian ngalokhu kudalulwa, ukuhlaselwa "kwakuhlelwe yilungu eliphakeme le-Politburo elathayipha igama lalo enguqulweni yomhlaba wonke yenjini yokusesha futhi lathola izihloko ezazimgxeka mathupha".  Lapho isimiso sesisulu sesithonywe, ukuxhumana okucashile okwakugqokwa njengokuxhumana kwe-SSL kwakwenza ukuxhumana kumaseva okulawula nokulawula asebenza e-Illinois, eTexas, naseTaiwan, kuhlanganise nemishini eyayisebenza ngaphansi kwama-akhawunti amakhasimende e-Rackspace eyebiwe. Umshini wesisulu wabe usuqala ukuhlola i-intranet yenkampani evikelwe eyayiyingxenye yawo, usesha ezinye izinhlelo ezisengozini kanye nemithombo yempahla enobuhlakani, ikakhulukazi okuqukethwe yizindawo zokugcina amakhodi emithombo.  Kucatshangwa ukuthi ukuhlaselwa kwaphela ngokuphelele ngoJanuwari 4 lapho ama-server okulawula nokulawula evalwa, nakuba kungaziwa okwamanje ukuthi abahlaseli bawavala ngenhloso yini noma cha. Nokho, ukuhlaselwa kwakusaqhubeka ngoFebhuwari 2010.  Impendulo kanye nemiphumela Ohulumeni baseJalimane, base-Australia nabaseFrance bakhipha izixwayiso obala kubasebenzisi be-Internet Explorer ngemva kwalokhu kuhlaselwa, babeluleka ukuba basebenzise ezinye iziphequluli okungenani kuze kulungiswe igebe lezokuphepha. Ohulumeni baseJalimane, base-Australia nabaseFrance babheka zonke izinhlobo ze-Internet Explorer njengezisengozini noma ezingase zibe sengozini.  Ngo-January 14, 2010, i-Microsoft yathi abahlaseli abahlasela i-Google nezinye izinkampani zase-U.S. basebenzisa isofthiwe esebenzisa iphutha kuyi-Internet Explorer. Lesi sikhala sithinta izinguqulo ze-Internet Explorer 6, 7 no-8 ku-Windows 7, Vista, Windows XP, Server 2003, Server 2008 R2, kanye ne-IE 6 Service Pack 1 ku-Windows 2000 Service Pack 4.  Ikhodi yokuxhaphaza i-Internet Explorer esetshenziswe kulokhu kuhlaselwa ikhishwe emphakathini, futhi ifakiwe kuthuluzi lokuhlola ukungena kweMetasploit Framework. Ikhophi yaleli phutha lalayishwa kuyi-Wepawet, isevisi yokuthola nokuhlaziya i-malware esekelwe kuwebhu eqhutshwa iqembu lezokuphepha kwamakhompyutha e-University of California, eSanta Barbara. "Ukukhululwa komphakathi kwekhodi yokuxhaphaza kwandisa amathuba okuhlaselwa kabanzi kusetshenziswa ubuthakathaka be-Internet Explorer", kusho uGeorge Kurtz, CTO weMcAfee, ngokuhlaselwa. "Ikhodi ye-computer manje esesidlangalaleni ingase isize izigebengu ze-computer ukuba zenze ukuhlasela okusebenzisa leli thuba ukuze zonakalise izinhlelo ze-Windows".  Inkampani yezokuphepha i-Websense yathi ithole "ukusetshenziswa komphakathi okulinganiselwe" kwesikhala se-IE esingalungiswanga ekuhlaselweni kwabasebenzisi abazulazula kumawebhusayithi ayingozi. Ngokusho kweWebsense, ikhodi yokuhlaselwa eyitholile iyafana ne-exploit eyavela esidlangalaleni ngesonto eledlule. "Abasebenzisi be-Internet Explorer njengamanje babhekene nengozi yangempela futhi yamanje ngenxa yokudalulwa esidlangalaleni kobuthakathaka nokukhishwa kwekhodi yokuhlaselwa, okwandisa amathuba okuhlaselwa okubanzi", kusho uGeorge Kurtz, isikhulu sezobuchwepheshe seMcAfee, ekubuyekezweni kwebhulogi. Ukuqinisekisa lokhu kucatshangelwa, iWebsense Security Labs yathola amanye amasayithi asebenzisa ukuhlukunyezwa ngoJanuwari 19. Ngokwemibiko evela ku-Ahnlab, i-URL yesibili yasakazwa ngenethiwekhi ye-Instant Messenger uMisslee Messenger, iklayenti le-IM elidumile eNingizimu Korea.  Abacwaningi bakhiphe ikhodi yokuhlasela esebenzisa ubuthakathaka ku-Internet Explorer 7 (IE7) naku-IE8<unk>ngisho nalapho isilinganiso sokuzivikela esinconywe yi-Microsoft (Data Execution Prevention (DEP)) sivuliwe. Ngokusho kukaDino Dai Zovi, umcwaningi wobuthakathaka bezokuphepha, "ngisho ne-IE8 entsha ayiphephile ekuhlaselweni uma isebenza ku-Windows XP Service Pack 2 (SP2) noma ngaphambili, noma ku-Windows Vista RTM (ukukhishwa kokukhiqiza), inguqulo iMicrosoft eyathunyelwa ngoJanuwari 2007. "  IMicrosoft yavuma ukuthi ibilokhu yazi ngegebe lezokuphepha elisetshenzisiwe kusukela ngo-September. Umsebenzi wokuvuselela wabekwa phambili futhi ngoLwesine, ngoJanuwari 21, 2010, iMicrosoft yakhipha isichibiyelo sokuphepha esihlose ukubhekana nalobu buthakathaka, ukusetshenziswa okushicilelwe okususelwa kukho kanye nezinye izinto eziningi ezibikwa ngasese. Abazange basho ukuthi ngabe kukhona yini okwakusetshenziswe noma okushicilelwe ngabasebenzisi noma ukuthi ngabe lokhu kunobudlelwano obuthile nokusebenza kwe-Aurora, kodwa konke ukuvuselelwa okuhlanganisiwe kwabizwa ngokuthi kubalulekile ezinhlotsheni eziningi zeWindows, kufaka phakathi iWindows 7.  Abacwaningi bezokuphepha baqhubeka nokuphenya ngalokhu kuhlasela. IHBGary, inkampani yezokuphepha, yakhipha umbiko lapho yathi ithole khona izimpawu ezibalulekile ezingase zisize ekuboneni umthuthukisi wekhodi. Le nkampani yaphinde yathi le khodi isekelwe olimini lwesiShayina kodwa ayinakuboshelwa kunoma iyiphi inhlangano kahulumeni.  NgoFebhuwari 19, 2010, isazi sezokuphepha esiphenya ngokuhlaselwa kwe-cyber ku-Google, sathi abantu abasemuva kwalokhu kuhlasela nabo babephethe ukuhlaselwa kwe-cyber okwenziwa ezinkampanini eziningana ze-Fortune 100 eminyakeni eyodwa nengxenye edlule. Baphinde balandelela ukuhlaselwa kwaze kwafika lapho kwaqala khona, okubonakala sengathi yizikole ezimbili zaseChina, iShanghai Jiao Tong University neLanxiang Vocational School. Njengoba kwaqokonyiswa yi-New York Times, zombili lezi zikole zinobudlelwano nenjini yokusesha yaseChina iBaidu, imbangi ye-Google China. Zombili iLanxiang Vocational neJiaotong University ziye zakuphika lokhu okushiwo.  Ngo-March 2010, i-Symantec, eyayisiza ekuphenyeni ukuhlaselwa kwe-Google, yakhomba i-Shaoxing njengomthombo wama-21.3% awo wonke ama-imeyili ayingozi athunyelwa emhlabeni wonke.  Ukubheka Emuva Ku-Google Ngo-Okthoba 3, 2022, i-Google ku-YouTube yakhipha uchungechunge oluneziqephu eziyisithupha oluhlanganisa izehlakalo ezenzeka ngesikhathi se-Operation Aurora, kanye nokuphawula okuvela kwabangaphakathi ababhekane nokuhlaselwa, yize uchungechunge lwama-premium lwalugxile ekuqinisekiseni umphakathi osebenzisa i-Google ukuthi izinyathelo zikhona zokulwa nemizamo yokugenca.
Kubonakala sengathi i-Google, i-Adobe Systems, i-Akamai Technologies, i-Juniper Networks, i-Rackspace, i-Yahoo, i-Symantec, i-Northrop Grumman, i-Morgan Stanley, ne-Dow Chemical ziye zaba izisulu zalokhu kuhlaselwa. Abanye bakuqinisekisa obala lokhu kuyilapho abanye bethi bahlaselwa emibikweni yabezindaba.