Marka la eego qodobka ku saabsan howlgalka Aurora, yaa loo malaynayaa inuu yahay qaranka ay weeraradu ka dhaceen?
Context:Howlgalka Aurora wuxuu ahaa taxane weeraro internet ah oo ay fuliyeen hanjabaado joogto ah oo horumarsan sida Kooxda Elderwood ee fadhigeedu yahay Beijing, Shiinaha, oo xiriir la leh Ciidanka Xoreynta Dadka. Markii ugu horeysay ee ay Google shaacisay Janaayo 12, 2010, qoraal blog ah, weerarradu waxay bilaabeen badhtamihii 2009 waxayna sii socdeen illaa Diseembar 2009.  Weerarka waxaa lagu bartilmaameedsaday dhowr iyo toban urur oo kale, kuwaas oo Adobe Systems, Akamai Technologies, Juniper Networks, iyo Rackspace ay si cad u xaqiijiyeen in la bartilmaameedsaday. Sida laga soo xigtay warbixinnada warbaahinta, Yahoo, Symantec, Northrop Grumman, Morgan Stanley, iyo Dow Chemical ayaa sidoo kale ka mid ahaa bartilmaameedyada.  Natiijada weerarka, Google ayaa ku sheegtay boggeeda in ay qorsheyneyso in ay ku shaqeyso nooc gebi ahaanba aan la xakameyn karin oo ah mashiinka raadinta ee Shiinaha "sharciga gudihiisa, haddii ay jirto", waxayna qirtay in haddii aysan taasi suurtagal ahayn, ay ka bixi karto Shiinaha oo ay xirto xafiisyadeeda Shiinaha. Ilo wareedyo rasmi ah oo Shiine ah ayaa sheegaya in tani ay qeyb ka ahayd istaraatiijiyad ay soo saartay dowladda Mareykanka.  Weerarka waxaa loogu magac daray "Operation Aurora" Dmitri Alperovitch, oo ah madaxweyne ku xigeenka cilmi baarista khatarta shirkada McAfee. Cilmi baarista McAfee Labs waxay ogaatay in "Aurora" ay qayb ka ahayd dariiqa faylka ee mashiinka weeraryahanka oo lagu daray laba ka mid ah barnaamijyada binary-ka ah ee McAfee uu sheegay inay la xiriiraan weerarka. "Waxaan aaminsanahay in magaca uu ahaa magaca gudaha ee weeraryahanada ay siiyeen howlgalkan", ayuu yiri Madaxa Teknolojiyada ee McAfee George Kurtz oo ku soo qoray bartiisa.  Sida laga soo xigtay McAfee, ujeedada koowaad ee weerarku waxay ahayd helitaanka iyo wax ka beddelka kaydka koodhka ilaha ee tiknoolajiyada sare, amniga, iyo shirkadaha qandaraasleyda difaaca. Alperovitch wuxuu yiri, "SCM-yadu waxay ahaayeen kuwo furan. "Qofna waligiis kuma fikirin in la ilaaliyo, laakiin kuwani waxay ahaayeen jawharadihii taajka ee shirkadahaan badankood siyaabo badan - aad uga qiimo badan wixii macluumaad maaliyadeed ama shaqsi ah ee la aqoonsan karo ee ay lahaan karaan oo ay waqti badan iyo dadaal badan ku bixiyaan ilaalinta".  Taariikhda  Ubaxyo ayaa laga tagay meel ka baxsan xarunta Google ee Shiinaha kadib markii ay ku dhawaaqday inay ka tagi karto dalka. 12-kii Janaayo, 2010, Google ayaa shaaca ka qaaday boggeeda in ay ahayd dhibane weerar internetka ah. Shirkadda ayaa sheegtay in weerarka uu dhacay bartamihii Diseembar wuxuuna ka yimid Shiinaha. Google ayaa sheegtay in in ka badan 20 shirkadood oo kale la weeraray; ilo kale ayaa tan iyo markii la soo xigtay in in ka badan 34 urur ay bartilmaameedsadeen. Ka dib weerarka, Google waxay sheegtay inay dib u eegis ku sameyneyso ganacsigeeda Shiinaha. Isla maalintaas, Xoghayaha Arrimaha Dibadda ee Mareykanka Hillary Clinton ayaa soo saartay bayaan kooban oo ay ku cambaareyneyso weerarrada waxayna weydiisatay jawaab ka timid Shiinaha.  Bishii Janaayo 13, 2010, wakaaladda wararka ee All Headline News ayaa soo warisay in Koongareeska Mareykanka uu qorsheynayo inuu baaro eedeymaha Google ee ah in dowladda Shiinaha ay adeegsatay adeegga shirkadda si ay u basaasaan dhaqdhaqaaqayaasha xuquuqda aadanaha.  Magaalada Beijing, booqdayaashu waxay ubax dhigeen xafiiska Google. Si kastaba ha noqotee, kuwan ayaa markii dambe la saaray, iyadoo ilaaliye Shiineys ah uu caddeeyay in tani ay ahayd "aqoonsi ubax sharci darro ah". Dowladda Shiinaha weli jawaab rasmi ah kama bixin, inkasta oo sarkaal magaciisa qariyay uu sheegay in Shiinuhu raadinayo macluumaad dheeraad ah oo ku saabsan ujeedooyinka Google.  Kuwa weerarka geystay Macluumaad dheeraad ah: Dagaalka internetka ee Shiinaha Caddeymo farsamo oo ay ku jiraan cinwaanada IP, magacyada domain, calaamadaha khayaanada, iyo qodobo kale, waxay muujinayaan in Elderwood uu ka danbeeyay weerarkii Operation Aurora. Kooxda "Elderwood" waxaa magacaabay Symantec (ka dib markii la beddelay koodhka isha ee ay adeegsadeen weeraryahanada), waxaana loo yaqaan "Kooxda Beijing" ee Dell Secureworks. Kooxdu waxay heshay qaar ka mid ah koodhka isha ee Google, iyo sidoo kale helitaanka macluumaadka ku saabsan dhaqdhaqaaqayaasha Shiinaha. Elderwood waxay sidoo kale bartilmaameedsatay shirkado kale oo badan oo ka tirsan maraakiibta, duulista hawada, hubka, tamarta, wax soo saarka, injineernimada, elektiroonigga, maaliyadda, iyo qaybaha softiweerka.  Magaca "APT" ee khatarta Shiinaha ee ka danbaysa weerarkii Google waa APT17.  Elderwood waxay ku takhasustay weerarka iyo soo galida shirkadaha wax iibiya ee heerka labaad ee warshadaha difaaca ee sameeya qalabka elektarooniga ah ama qalabka farsamada ee shirkadaha difaaca ee ugu sareeya. Shirkadahaasi waxay markaa noqdaan "xuddunta" internetka si ay u helaan qandaraaslayaasha ugu sareeya ee difaaca. Mid ka mid ah hababka weerarka ee uu adeegsado Elderwood waa inuu ku faafo bogagga internetka ee sharciga ah ee ay booqdaan shaqaalaha shirkadda bartilmaameedka ah <unk> waxa loogu yeero weerarka "qulqulka biyaha", sida libaaxyada ay ugaarsadaan god biyo ah oo ay ugaarsadaan. Elderwood waxa uu ku dhajiyaa boggaan oo aan amaan aheyn barnaamijyo xunxun, kuwaasoo lagu soo dajiyo kumbuyuutarka gudihiisa marka uu qofku galo boggaas. intaas kadib, kooxdu waxay baareysaa shabakada meesha kombiyuutarkaasi ku jiro, waxayna helayaan kadibna waxay soo dejiyaan emaylka madaxda iyo warar muhiim ah oo ku saabsan qorshaha shirkada, go'aanada, gadashada, iyo naqshadaha alaabta  Falanqaynta weerarka Qoraal ay soo dhigtay barteeda, Google waxay sheegtay in qaar ka mid ah hantidooda aqooneed la xaday. Waxay soo jeedisay in weerarayaashu ay xiiseynayaan inay galaan xisaabaadka Gmail ee mucaaradka Shiinaha. Sida laga soo xigtay Financial Times, laba koonto oo uu isticmaalay Ai Weiwei ayaa la weeraray, waxyaabaha ku jira ayaa la akhriyay oo la nuqul; xisaabtiisa bangiga waxaa baaray wakiillada amniga ee dowladda oo sheegtay inuu ku hoos jiro baaritaan "dambiyada la tuhunsan yahay ee aan la cayimin". Si kastaba ha ahaatee, weeraryahanadu waxay awoodeen inay arkaan kaliya faahfaahinta laba koonto oo faahfaahintaas waxay ku koobnayd waxyaabo ay ka mid yihiin khadka mawduuca iyo taariikhda abuuritaanka koontooyinka.  Khubarada amaanka ayaa isla markiiba ogaaday sida ay u adagtahay weerarka. Laba maalmood ka dib markii weerarka la shaaciyay, McAfee wuxuu sheegay in weerarayaashu ay ka faa'iideysteen cilado la sheegay inay tahay maalin-eber (oo aan la hagaajin oo aan horay loo aqoon horumariyeyaasha nidaamka bartilmaameedka ah) ee Internet Explorer waxayna ku magacaabeen weerarka "Operation Aurora". Toddobaad ka dib warbixinta McAfee, Microsoft waxay soo saartay hagaajin ku saabsan arrintan, waxayna qirtay inay ogyihiin daloolka amniga ee la isticmaalay ilaa Sebtember. Meelo kale oo la isku halleyn karo ayaa laga helay barnaamijka wax ka beddelidda koodhka asalka ah ee loo yaqaan 'Perforce', kaas oo ay Google u adeegsato maareynta koodhkooda asalka ah.  VeriSign's iDefense Labs ayaa sheegtay in weerarrada ay fuliyeen "wakiilo ka tirsan dowladda Shiinaha ama wakiillo ka tirsan".  Sida laga soo xigtay digniin diblomaasiyadeed oo ka socota safaaradda Mareykanka ee Beijing, ilo Shiine ah ayaa soo wariyay in xafiiska siyaasadda Shiinaha uu faray in la jabsado nidaamyada kombiyuutarka ee Google. Fariinta waxay tilmaamtay in weerarka uu qeyb ka ahaa olole isku dubaridan oo ay fuliyeen "shaqaalaha dowladda, khubarada amniga dadweynaha iyo kuwa ka baxsan sharciga internetka ee ay qortay dowladda Shiinaha". Warbixintu waxay sheegtay in ay qayb ka ahayd olole socda oo ay ku jiraan "in ay jabsadeen kumbiyuutarrada dawladda Maraykanka iyo kuwa xulafada reer galbeedka, Dalai Lama iyo ganacsiyada Maraykanka tan iyo 2002". Sida laga soo xigtay warbixinta The Guardian ee ku saabsan daadanka, weerarrada waxaa "soo abaabulay xubin sare oo ka tirsan Politburo oo magaciisa ku qortay nooca caalamiga ah ee mashiinka raadinta oo helay maqaallo isaga dhaleeceynaya shaqsi ahaan".  Marka nidaamka dhibanaha la jabsado, isku xirka gadaal ee loo yaqaan isku xirka SSL wuxuu sameeyay isku xirnaanta amarka iyo xakameynta server-yada ka shaqeeya Illinois, Texas, iyo Taiwan, oo ay ku jiraan mashiinada ku shaqeeya akoonnada macaamiisha Rackspace ee la xaday. Mashiinka dhibbanaha ayaa markaas bilaabay inuu baaro shabakada shirkada ee la ilaaliyay oo uu qeyb ka ahaa, isagoo raadinaya nidaamyo kale oo nugul iyo sidoo kale ilaha hantida aqooneed, gaar ahaan waxyaabaha ku jira keydka koodhka.  Weerarrada waxaa loo maleynayaa inay si rasmi ah u dhammaadeen 4tii Janaayo markii amarka iyo xakamaynta server-yada la joojiyay, in kasta oo aan la ogeyn xilligan in weerarayaashu ay si ula kac ah u xireen ama aysan xirin. Si kastaba ha noqotee, weerarradu wali way sii socdeen ilaa Febraayo 2010.  Jawaabta iyo cawaaqibka Dowladaha Jarmalka, Australia, iyo Faransiiska ayaa si cad u soo saaray digniino loogu talagalay dadka isticmaala Internet Explorer weerarka kadib, iyagoo kula taliyay inay isticmaalaan daalacashada kale ugu yaraan illaa inta laga saari doono daloolka amniga. Dowladaha Jarmalka, Australia, iyo Faransiiska waxay u arkeen dhammaan noocyada Internet Explorer inay yihiin kuwo nugul ama ay u badan tahay inay nugul yihiin.  Warbixin ay soo saartay 14kii Janaayo 2010, Microsoft waxay ku sheegtay in weerarayaasha ay bartilmaameedsadeen Google iyo shirkado kale oo Mareykan ah ay adeegsadeen barnaamij ka faa'iideysanaya godka ku jira Internet Explorer. Dhibku wuxuu saameeyaa Internet Explorer noocyada 6, 7, iyo 8 ee Windows 7, Vista, Windows XP, Server 2003, Server 2008 R2, iyo sidoo kale IE 6 Service Pack 1 ee Windows 2000 Service Pack 4.  Koodhka Internet Explorer ee loo adeegsaday weerarka ayaa loo sii daayay qaybta dadweynaha, waxaana lagu daray qalabka tijaabada dhexgalka ee Metasploit Framework. Nuqul ka mid ah jabsiga waxaa la geliyay Wepawet, oo ah adeeg lagu ogaado laguna falanqeeyo barnaamijyada xun ee ku saleysan shabakadda oo ay maamusho kooxda amniga kombiyuutarka ee Jaamacadda California, Santa Barbara. "Soo bandhigida dadweynaha ee koodhka ka faa'iideysiga waxay kordhisaa suurtagalnimada weerarro baahsan iyadoo la adeegsanayo nuglaanta Internet Explorer", ayuu yiri George Kurtz, CTO ee McAfee, weerarka. "Koodhka kumbuyuutarka ee hadda dadweynaha ayaa ka caawin kara dembiilayaasha internetka inay fuliyaan weerarro ay ku isticmaalaan nuglaanta si ay u waxyeeleeyaan nidaamyada Windows".  Shirkadda amniga ee Websense ayaa sheegtay inay ogaatay "isticmaalka dadweynaha ee xaddidan" ee nuglaanta IE ee aan la dayactirin ee weerarada wadista ee ka dhanka ah dadka isticmaala kuwaas oo ku wareegay boggaga internetka ee xaasidnimada leh. Sida laga soo xigtay Websense, koodhka weerarka ee ay aragtay wuxuu la mid yahay faa'iidada la shaaciyay usbuucii la soo dhaafay. "Isticmaalayaasha Internet Explorer waxay hadda wajahayaan khatar dhab ah oo hadda jirta sababtoo ah shaacinta dadweynaha ee nuglaanta iyo sii deynta koodhka weerarka, kordhinta suurtagalnimada weeraro baahsan, "ayuu yiri George Kurtz, oo ah madaxa tikniyoolajiyadda McAfee, cusbooneysiinta blog. Xaqiijinta mala-awaalkan, Websense Security Labs waxay aqoonsatay goobo dheeraad ah oo adeegsanaya ka faa'iideysiga Janaayo 19. Sida laga soo xigtay warbixinnada Ahnlab, URL-ka labaad waxaa lagu faafiyay shabakadda Instant Messenger Misslee Messenger, oo ah macmiil caan ah oo IM ah oo ku yaal Koonfurta Kuuriya.  Cilmi baarayaashu waxay abuureen koodh weerar ah oo ka faa'iideysanaya nuglaanta Internet Explorer 7 (IE7) iyo IE8 <unk> xitaa marka tallaabada difaaca ee Microsoft lagu taliyay (Data Execution Prevention (DEP)) la kiciyo. Sida laga soo xigtay Dino Dai Zovi, oo ah cilmi baare u nuglaanta amniga, "xitaa IE8 cusub kama badbaado weerarka haddii ay ku shaqeyneyso Windows XP Service Pack 2 (SP2) ama ka hor, ama Windows Vista RTM (sii deynta wax soo saarka), nooca Microsoft ay soo saartay bishii Janaayo 2007. "  Microsoft waxay qirtay in ciladaha amaanka ee la adeegsaday ay ogaayeen tan iyo bishii Sebtember. Shaqada cusbooneysiinta ayaa mudnaanta la siiyay Khamiista, Janaayo 21, 2010, Microsoft waxay soo saartay qalab amni oo loogu talagalay in lagu hortago daciifnimadaas, faa'iidooyinka la daabacay ee ku saleysan iyo tiro kale oo ah nuglaanta si gaar ah loo soo sheegay. Ma aysan sheegin haddii mid ka mid ah kuwa dambe ay isticmaaleen ama daabaceen kuwa wax ku qaata ama haddii ay xiriir gaar ah la lahaayeen hawlgalka Aurora, laakiin cusbooneysiinta isku-darka oo dhan waxaa loogu yeeray mid muhiim u ah inta badan noocyada Windows, oo ay ku jiraan Windows 7.  Baarayaasha amaanka ayaa sii waday baaritaanka weerarada. HBGary, oo ah shirkad amaan, ayaa daabacday warbixin ay ku sheegeen inay heleen calaamado muhiim ah taasoo ka caawin karta aqoonsashada codsadaha. Shirkadda ayaa sidoo kale sheegtay in koodhku ku saleysan yahay luqadda Shiinaha laakiin aan si gaar ah loogu xiriirin karin hay'ad dowladeed.  Febraayo 19, 2010, khabiir dhanka amniga ah oo baaraya weerarkii internetka ee Google, ayaa sheegtay in dadka weerarka ka dambeeyay ay sidoo kale mas'uul ka ahaayeen weeraradii internetka ee lagu qaaday dhowr shirkadood oo Fortune 100 ah sanadkii iyo badhkii la soo dhaafay. Waxay kaloo raadiyeen weerarkii meesha uu ka imaaday, kaasoo u muuqday inuu ka dhacay labo iskuul oo Shiinees ah, Jaamacada Shanghai Jiao Tong iyo Lanxiang Vocational School. Sida lagu sheegay wargeyska The New York Times, labadan dugsi waxay xiriir la leeyihiin mashiinka raadinta Shiinaha ee Baidu, oo ah tartan ka dhan ah Google China. Labada Lanxiang Vocational iyo Jaamacadda Jiaotong ayaa beeniyay eedeymaha.  Bishii Maarso 2010, Symantec, oo ka caawinayay baaritaanka weerarka Google, ayaa Shaoxing u aqoonsaday inay tahay isha 21.3% dhammaan (12 bilyan) emayllada xaasidnimada leh ee loo diray adduunka oo dhan.  Dib u eegista Google Bishii Oktoobar 3, 2022, Google on YouTube ayaa sii daayay taxane lix qaybood ah oo ka hadlaya dhacdooyinkii dhacay intii lagu jiray Hawlgalka Aurora, oo ay la socdaan faallooyin ka yimid dadka gudaha ah ee wax ka qabtay weerarka, in kasta oo diiradda koowaad ee taxanaha ay ahayd in la hubiyo dadweynaha isticmaala Google in tallaabooyin loo qaaday si looga hortago isku dayga jabsiga.
Ciidanka Xoreynta Shacabka ee Shiinaha (PLA) ayaa la rumeysan yahay inay ka dambeeyaan howlgalkan.