Tichifunga nezvenyaya iyi yeOperation Aurora, rudzi rupi rwaifungidzirwa kuva rwakaparadzwa nokurwiswa uku?
Context:Operation Aurora yakanga iri nhevedzano yekurwiswa kwekombiyuta kwakaitwa nekutyisidzira kwakasimba kwakadai seElderwood Group yakavakirwa muBeijing, China, ine hukama nePeople's Liberation Army. Kutanga kuziviswa pachena neGoogle musi waJanuary 12, 2010, mune imwe blog post, kurwiswa kwakatanga pakati pa2009 uye kwakapfuurira kusvika muna December 2009.  Kurwiswa kwacho kwakanangana nemamwe masangano akawanda, ayo Adobe Systems, Akamai Technologies, Juniper Networks, uye Rackspace vakasimbisa pachena kuti ndivo vakanangwa. Maererano nemishumo yenhau, Yahoo, Symantec, Northrop Grumman, Morgan Stanley, uye Dow Chemical zvaivawo pakati pezvinangwa.  Somugumisiro wekurwiswa uku, Google yakataura mubhuku rayo kuti inoronga kushanda shanduro isingaongororwi zvachose yekutsvaga kwayo muChina "mune mutemo, kana zvachose", uye yakabvuma kuti kana izvi zvisingabviri, inogona kusiya China uye kuvhara mahofisi ayo eChinese. Masosi epamutemo echiChinese akataura kuti ikoku kwakanga kuri rutivi rwenzira yakagadzirwa nehurumende yeU.S.  Kurwisa kwacho kwakatumidzwa kuti "Operation Aurora" naDmitri Alperovitch, Mutevedzeri Wemutungamiriri weKutsvakurudza Kwezvinotyisidzira pakambani yokuchengetedzwa kwekombiyuta yeMcAfee. Kutsvakurudza kwakaitwa naMcAfee Labs kwakawana kuti "Aurora" yaiva rutivi rwomugwagwa wefaira pamushini womurwisi uyo akabatanidzwa mune zviviri zvezvinyorwa zve malware izvo McAfee akati zvakabatanidzwa nekurwiswa. "Tinotenda kuti zita racho raiva zita romukati rakapiwa nevanorwisa basa iri", akadaro George Kurtz, mukuru mukuru wezvekugadzirwa kwezvinhu paMcAfee mubhuku rake.  Maererano naMcAfee, chinangwa chikuru chokurwiswa kwacho chaiva chokuwana uye zvichida kuchinja zvinyorwa zvemashoko ezvinyorwa pamakambani aya ezvokugadzira zvinhu zvemazuva ano, okuchengetedza, uye okurwira. Alperovitch anoti: "[SCMs] dzakanga dzakavhurika". "Hapana munhu akambofunga nezvokudzichengetedza, asi idzi ndidzo dzakanga dziri pfuma inokosha yemakambani akawanda aya munzira dzakawanda - dzinokosha zvikuru kudarika chero mashoko emari kana kuti anoratidza munhu chaiye angava nawo uye anoshandisa nguva yakawanda nesimba kudzivirira".  Nhoroondo  Maruva akasiiwa kunze kwedzimbahwe reGoogle China mushure mekuzivisa kwayo kuti ingangosiya nyika Musi waJanuary 12, 2010, Google yakaratidza pablog yayo kuti yakanga yabatwa nekurwiswa necyber. Kambani yacho yakati kurwisa kwacho kwakaitika pakati paDecember uye kwakabva kuChina. Google yakataura kuti mamwe makambani anodarika makumi maviri akarwiswa; mamwe manyuko kubvira ipapo akataura kuti masangano anodarika makumi matatu nemana akarwiswa. Somugumisiro wokurwiswa, Google yakati yakanga ichiongorora bhizimisi rayo muChina. Zuva rimwe chetero, Munyori weHurumende yeUnited States Hillary Clinton akabudisa mashoko mapfupi achishora kurwiswa uku uye achikumbira kuti China ipindure.  Musi waJanuary 13, 2010, sangano renhau reAll Headline News rakashuma kuti United States Congress inoronga kuongorora zvinonzi neGoogle kuti hurumende yeChina yakashandisa basa rekambani kuongorora vanorwira kodzero dzevanhu.  MuBeijing, vashanyi vakasiya maruva kunze kwehofisi yeGoogle. Zvisinei, izvi zvakazobviswa, mumwe muchengeti weChina achitaura kuti iyi yakanga iri "mutero wemaruva usiri pamutemo". Hurumende yeChinese haisati yaburitsa mhinduro yepamutemo, kunyangwe mukuru asingazivikanwe akataura kuti China yanga ichitsvaga rumwe ruzivo nezve zvinangwa zveGoogle.  Varwi vanobatanidzwa Mamwe mashoko: Cyberwarfare neChina Uchapupu hwokugadzira zvinhu hunosanganisira kero dzeIP, mazita enzvimbo, zviratidzo zvepurogiramu yakaipa, uye zvimwe zvinhu, zvinoratidza kuti Elderwood ndiye akanga ari shure kwokudenha Operation Aurora. Boka re "Elderwood" rakatumidzwa zita neSymantec (mushure mekushandurwa kwekodhi yekushandisa inoshandiswa nevanorwisa), uye inonzi "Beijing Group" naDell Secureworks. Boka racho rakawana mamwe mashoko eGoogle, pamwe chete nokuwana mashoko pamusoro pevanhu vokuChina vanoshingaira. Elderwood akarongawo mamwe makambani akawanda mumakambani anotakura, ndege, zvombo, simba, kugadzira, mainjiniya, zvemagetsi, zvemari, uye software.  Zita rokuti "APT" rinoshandiswa kurondedzera vashandisi vokuChina vakatanga kurwisa Google rinonzi APT17.  Elderwood inonyanya kurwisa nokupinda muzvinhu zvinotengeswa neindasitiri yezvidziviriro yechipiri-tier izvo zvinogadzira zvinhu zvemagetsi kana kuti zvemachina zvemakambani okurwira makuru. Makambani iwayo anobva ava "nhanho" yokuwana nayo makambani epamusoro-soro anoona nezvokudzivirira. Imwe nzira yokurwisa inoshandiswa naElderwood ndeyokupinza utachiona mumawebhusaiti epamutemo anowanzoshandiswa nevashandi vekambani yavanorwisa - inonzi "kuvhozhokera mvura", kungofanana neshumba dzinovhozhokera mvura kuti dziwane mhuka dzavanoda. Elderwood anokuvadza aya masayiti asina kuchengeteka nemarware anodzorerwa kukomupiyuta inodzvanya panzvimbo yacho. Zvadaro, boka racho rinotsvaka mukati medandemutande rakasungirirwa kombiyuta ine utachiona, richitsvaka ndokubva rabudisa mae-mail evakuru vakuru uye magwaro anokosha nezvezvirongwa zvekambani, zvisarudzo, kutenga, uye kugadzirwa kwezvinhu.  Kuongorora kwekurwisa Muchikamu chayo chepa blog, Google yakataura kuti zvimwe zvezvinhu zvayo zvepfungwa zvakabiwa. Rakaratidza kuti vairwisa vacho vaida kuwana maGmail account evapanduki vokuChina. Maererano neFinancial Times, maakaundi maviri aishandiswa naAi Weiwei akanga arwiswa, zvaiva mukati zvacho zvakaverengwa ndokukopwa; maakaundi ake ebhengi akaongororwa nevashandi vezvekuchengetedzwa kwenyika avo vaiti akanga ari kuongororwa nokuda kwe"mhosva dzisingazivikanwi dzekufungidzirwa". Zvisinei, vanorwisa vakakwanisa kuona mashoko ari pamaakaundi maviri chete uye mashoko iwayo aingova nezvakadai semusoro wenyaya uye zuva rakaitwa maakaundi acho.  Nyanzvi dzezvokuchengetedza dzakacherechedza pakarepo kuti kurwisa kwacho kwakanga kwakaoma kunzwisisa. Mazuva maviri mushure mekurwiswa kwakave pachena, McAfee akataura kuti varwisi vakashandisa zvinonzi zero-day vulnerabilities (zvisina kugadziriswa uye zvisati zvazivikanwa kune vanogadzira masisitimu) muInternet Explorer uye vakatumidza kurwiswa "Operation Aurora". Vhiki rimwe mushure mokunge McAfee apa mushumo wake, Microsoft yakabudisa gadziriro yechinetso chacho, uye yakabvuma kuti yakanga yaziva nezvokuputsika kwechengeteko kwaishandiswa kubva muna September. Zvimwe zvikanganiso zvakawanikwa muPerforce, software yekudzokorora kodhi yekushandisa inoshandiswa neGoogle kubata kodhi yavo yekushandisa.  VeriSign's iDefense Labs yakataura kuti kurwiswa kwacho kwakaitwa ne"vashandi vehurumende yeChina kana kuti vamiririri vayo".  Maererano nekambasi yehurumende kubva kuU.S. Embassy muBeijing, rimwe bhuku reChinese rakashuma kuti Chinese Politburo yakatungamirira kupindira mumakombiyuta eGoogle. Tsamba yacho yaitaura kuti kurwisa kwacho kwaiva chikamu chokurwisa kwakarongwa kwakaitwa ne"vashandi vehurumende, nyanzvi dzokuchengetedza ruzhinji uye vanhu vanopara mhosva dzepaIndaneti vakanyoreswa nehurumende yeChina". Mushumo wacho wakaratidza kuti izvi zvaiva zvimwe zvezvinhu zvaiitwa nevanorwisa "kuvhura makombiyuta ehurumende yeAmerica neevamwe vakabatana nayo vokuMadokero, Dalai Lama nemabhizimisi eAmerica kubvira muna 2002". Maererano neThe Guardian ichishuma nezvokudonha kwacho, kurwiswa kwacho "kwakarongwa nenhengo yepamusoro yePolitburo iyo yakanyora zita rayo pachayo mushanduro yenyika yose yeinjini yokutsvaka ndokuwana nyaya dzaimushora somunhu oga".  Kamwe bedzi gadziriro yomukwanyina yakashatiswa, batano yapashure iyo yakazvivanza somubatanidzwa weSSL yakaita batano kumirairo namaseva okutonga zvinomhanya muIllinois, Texas, neTaiwan, kubatanidza michina yakanga ichimhanya pasi pemakaundi evatengi eRackspace akabiwa. Muchina womunhu wacho wakabva watanga kuongorora intranet yebhizimisi yaichengetedzwa yawaiva chikamu chayo, uchitsvaka mamwe masisitimu asina kudzivirirwa pamwe chete nemanyuko epfuma yokuchenjera, zvikurukuru zviri mumagwaro anogadzira mashoko.  Kurwiswa kwaifungidzirwa kuti kwakapera zvachose musi wa 4 Ndira apo maseva ekutonga uye ekudzora akadzimwa, kunyangwe zvisingazivikanwe panguva ino kana varwisi vakaadzima nemaune. Zvisinei, kurwiswa kwacho kwakanga kuchiri kuitika muna February 2010.  Mhinduro nemigumisiro Hurumende dzeGermany, Australia, neFrance dzakataura pachena nezvenyevero kuvashandisi veInternet Explorer pashure pokurwiswa kwacho, dzichivakurudzira kuti vashandise mamwe mabhurawuza kusvikira gomba rokuchengetedza ragadziriswa. Hurumende dzeGermany, Australia, neFrance dzakarangarira shanduro dzose dzeInternet Explorer kuva dzisina kudzivirirwa kana kuti dzinogona kuva dzisina kudzivirirwa.  Mune rimwe gwaro rakapiwa musi waJanuary 14, 2010, Microsoft yakati vashandisi veGoogle nemamwe makambani okuUnited States vakashandisa purogiramu inobudisa mashoko akaoma muInternet Explorer. Kukanganiswa kunobata shanduro dzeInternet Explorer 6, 7, uye 8 paWindows 7, Vista, Windows XP, Server 2003, Server 2008 R2, uyewo IE 6 Service Pack 1 paWindows 2000 Service Pack 4.  Internet Explorer exploit code yakashandiswa pakurwiswa yakabudiswa pachena, uye yakabatanidzwa muMetasploit Framework penetration testing tool. Imwe kopi yeiyi exploit yakaiswa paWepawet, basa rekuona nekuongorora web-based malware rinoshandiswa neboka rekuchengetedza makombiyuta paUniversity of California, Santa Barbara. "Kuburitswa pachena kwekodhi yekushandisa kunowedzera mukana wekurwiswa kwakapararira uchishandisa kusagadzikana kweInternet Explorer", akadaro George Kurtz, CTO weMcAfee, nezvekurwiswa. "Kodhi yemakombiyuta yave kuwanikwa nevanhu vose inogona kubatsira matsotsi ari paIndaneti kugadzira zvinhu zvinokanganisa masisitimu eWindows".  Kambani yokuchengetedza Websense yakati yakaona "kushandiswa kwevoruzhinji kwakaganhurirwa" kwechikanganiso chisina kugadziriswa cheIE mukurwisa kwokudzinga kunopesana nevashandisi vakatsaukira kumapeji eWebhu ane utsinye. Maererano neWebsense, kodhi yekurwisa yavakaona yakafanana neyekushandisa iyo yakaburitswa pachena svondo rapfuura. "Vashandisi veInternet Explorer parizvino vanotarisana nenjodzi chaiyo uye iripo nekuda kwekuziviswa pachena kwekushomeka uye kuburitswa kwekodhi yekurwisa, ichiwedzera mukana wekurwiswa kwakapararira", akadaro George Kurtz, mukuru wezve tekinoroji weMcAfee, mune blog inogadziridza. Ichisimbisa fungidziro iyi, Websense Security Labs yakaona mamwe masayiti achishandisa kushandiswa musi waJanuary 19. Maererano nemishumo kubva kuAhnlab, URL yechipiri yakapararira kuburikidza neInstant Messenger network Misslee Messenger, mutengi anozivikanwa weIM muSouth Korea.  Vanotsvakurudza vakagadzira kodhi yekurwisa iyo inoshandisa kusagadzikana muInternet Explorer 7 (IE7) uye IE8<unk> kunyangwe apo Microsoft yakakurudzira nzira yekudzivirira (Data Execution Prevention (DEP)) yakavhurwa. [kusagadzikana <unk> kurukura] Maererano naDino Dai Zovi, mutsvakurudzi wekuchengetedzwa kwekuchengetedzwa, "kunyangwe iyo IE8 nyowani haina kuchengetedzeka kubva pakurwiswa kana iri kumhanya paWindows XP Service Pack 2 (SP2) kana yapfuura, kana paWindows Vista RTM (kuburitswa kwekugadzira), iyo vhezheni Microsoft yakatumirwa muna Ndira 2007. "  Microsoft yakabvuma kuti gomba rokuchengetedza rakashandiswa rakanga rava kuzivikanwa kwavari kubva muna September. Kushanda pane imwe shanduro kwakarongwa uye musi weChina, January 21, 2010, Microsoft yakabudisa chigadziro chekuchengetedza chinangwa chekurwisa kushaya simba uku, kushandiswa kwakabudiswa kwakavakirwa pairi uye zvimwe zvikanganiso zvakataurwa zvakavanzika. Havana kutaura kana chimwe chezvinhu izvi chaishandiswa kana kubudiswa nevashandisi kana kuti chaiva nechokuita neAurora operation, asi kugadziriswa kwese kwakaitwa kwakanzi kwakakosha kune akawanda mavhezheni eWindows, kusanganisira Windows 7.  Vanzveri vezvokuchengeteka vakapfuurira kuongorora denho. HBGary, kambani inochengetedza, yakabudisa mushumo umo yaiti yakawana zvimwe zviratidzo zvinokosha zvingabatsira kuziva mugadziri wekodhi. Sangano racho rakatiwo kodhi yacho yakanga iri mumutauro wokuChina asi yaisagona kunyatsobatanidzwa nehurumende ipi neipi.  Musi waFebruary 19, 2010, nyanzvi yekuchengetedza yakaongorora kurwiswa kweGoogle paGoogle, yakataura kuti vanhu vari kumashure kwekurwiswa vaivewo nebasa rekurwiswa kwecyber kwakaitwa kumakambani mazhinji Fortune 100 mumakore apfuura nehafu. Ivo vakateverawo denho yacho kudzokera kunzvimbo yayo yokutanga, iyo inoratidzika kuva zvikoro zviviri zveChinese, Shanghai Jiao Tong University neLanxiang Vocational School. Sezvakaratidzwa neThe New York Times, zvikoro zviviri izvi zvine ukama neinjini yekutsvaga yekuChina inonzi Baidu, inokwikwidza neGoogle China. Vose vari vaviri Lanxiang Vocational neJiaotong University vakaramba kupomerwa kwacho.  Muna Kurume 2010, Symantec, iyo yaibatsira kuongorora kurwiswa kweGoogle, yakaratidza Shaoxing seyo sosi ye21.3% yeese (12 bhiriyoni) emaimeri ane njodzi akatumirwa pasi rese.  Kuongorora kweGoogle Musi waGumiguru 3, 2022, Google paYouTube yakaburitsa nhevedzano yezvikamu zvitanhatu zvekufukidza zviitiko zvakaitika panguva yeOperation Aurora, nemashoko kubva kune vari mukati avo vakabata nekurwiswa, kunyangwe hazvo nhevedzano yekutarisa yaive yekuvimbisa veruzhinji vanoshandisa Google kuti matanho aripo ekudzivirira kuedza kubiridzira.
People's Liberation Army (PLA) yeChina inofungidzirwa kuva iri seri kweichi chiito.