英情報(bào)官員懷疑卡巴斯基與俄政府有聯(lián)系

British spymasters fear that anti-virus software given away for free by Barclays to more than 2m customers may be being used as an intelligence-gathering tool by the Russian government.

英國(guó)情報(bào)官員擔(dān)心巴克萊(Barclays)向200多萬(wàn)客戶免費(fèi)贈(zèng)送的殺毒軟件可能正被俄羅斯政府用作情報(bào)收集工具。

A senior Whitehall official told the Financial Times that GCHQ, Britain’s digital surveillance agency, has harboured concerns for months over the distribution in the UK of software from Kaspersky Lab, one of the world’s most successful computer security companies.

美國(guó)白宮一名高級(jí)官員告訴英國(guó)《金融時(shí)報(bào)》，英國(guó)從事電子監(jiān)聽(tīng)的情報(bào)機(jī)構(gòu)“政府通信總部”(GCHQ)數(shù)月來(lái)一直對(duì)卡巴斯基實(shí)驗(yàn)室(Kaspersky Lab)——全球最成功的計(jì)算機(jī)安全公司之一——的軟件在英國(guó)被分發(fā)感到憂心忡忡。

GCHQ suspects that Kaspersky may have been exploited by the FSB, the successor organisation to the KGB, to snoop on sensitive foreign targets.

政府通信總部懷疑卡巴斯基可能已被俄羅斯聯(lián)邦安全局(FSB，其前身為克格勃(KGB))用來(lái)對(duì)敏感外國(guó)目標(biāo)實(shí)施監(jiān)控。

Barclays, which has offered free subscriptions of the anti-virus software to users of its online banking services since 2008, is seeking to end its arrangement with Kaspersky.

巴克萊自2008年以來(lái)向其在線銀行服務(wù)的用戶免費(fèi)提供卡巴斯基殺毒軟件，該行現(xiàn)在正試圖終止與卡巴斯基的合作。

Intelligence officials worry that the widespread distribution of Kaspersky by Barclays in particular exposes at-risk individuals — such as employees of British government departments or members of the military — who are customers of the bank and have downloaded Kaspersky software to boost their home security. No evidence suggests that any data of Barclays customers have been compromised by use of Kaspersky software on their computers.

情報(bào)官員擔(dān)心巴克萊廣泛分發(fā)的卡巴斯基軟件讓該行客戶暴露于風(fēng)險(xiǎn)之中，尤其是其中的高風(fēng)險(xiǎn)人員，比如下載了卡巴斯基軟件在家中使用的英國(guó)政府部門雇員或軍方人員。目前沒(méi)有證據(jù)表明，在計(jì)算機(jī)上使用卡巴斯基軟件導(dǎo)致任何巴克萊客戶的數(shù)據(jù)被他人染指。

Barclays officials said they were seeking to quit the deal with Kaspersky for commercial reasons and that the move had no connection with GCHQ concerns. Officials at both Barclays and GCHQ said the two organisations had not discussed concerns over Kaspersky at any point.

巴克萊高層人士表示，他們出于商業(yè)原因正在尋求終止與卡巴斯基的協(xié)議，此舉與政府通信總部的擔(dān)憂無(wú)關(guān)。巴克萊高層人士和政府通信總部官員均表示，這兩個(gè)組織從未討論過(guò)對(duì)卡巴斯基的擔(dān)憂。

“We have never received any advice or guidance from GCHQ or the National Cyber Security Centre in relation to Kaspersky,” the bank said.

巴克萊表示：“我們從未收到政府通信總部或國(guó)家網(wǎng)絡(luò)安全中心(National Cyber Security Centre)有關(guān)卡巴斯基的任何建議或指導(dǎo)。”

The NCSC, the arm of GCHQ that liaises with the private sector to improve national cyber security, said: “The NCSC has never advised Barclays against the use of Kaspersky products. Any suggestion to the contrary is categorically untrue. The NCSC is not a regulator and does not mandate or ban any products. Our certification schemes do not currently cover anti-virus or anti-malware services.”

英國(guó)國(guó)家網(wǎng)絡(luò)安全中心隸屬政府通信總部，負(fù)責(zé)與私營(yíng)部門聯(lián)絡(luò)、以鞏固國(guó)家網(wǎng)絡(luò)安全。該中心表示：“國(guó)家網(wǎng)絡(luò)安全中心從未建議巴克萊不要使用卡巴斯基的產(chǎn)品。任何暗示情況恰恰相反的說(shuō)法都是謊言。國(guó)家網(wǎng)絡(luò)安全中心不是一個(gè)監(jiān)管機(jī)構(gòu)，也不會(huì)授權(quán)或禁止任何產(chǎn)品。我們的認(rèn)證計(jì)劃目前不包括殺毒或防惡意軟件服務(wù)。”

Public controversy around Kaspersky has been mounting since September, when the US Department of Homeland Security banned the software provider from all US government agencies.

自從9月份美國(guó)國(guó)土安全部(Department of Domestic Security)禁止所有美國(guó)政府機(jī)構(gòu)使用卡巴斯基的產(chǎn)品以來(lái)，圍繞這家軟件提供商的公眾爭(zhēng)議一直在加劇。

US and Israeli intelligence agencies have allegedly gathered evidence of “several” occasions in which Kaspersky was used by Russian agencies to hack sensitive information, according to senior western intelligence officials spoken to by the FT.

據(jù)英國(guó)《金融時(shí)報(bào)》接觸的西方高級(jí)情報(bào)機(jī)構(gòu)官員表示，美國(guó)和以色列情報(bào)機(jī)構(gòu)據(jù)稱已收集到證據(jù)證明，卡巴斯基“數(shù)”度被俄羅斯機(jī)構(gòu)用來(lái)竊取機(jī)密信息。

Kaspersky denied the allegations and said it did not have “inappropriate ties with any government”.

卡巴斯基否認(rèn)了上述指控，表示它與“任何政府之間都不存在不當(dāng)聯(lián)系”。

The cyber security firm added: “No credible evidence has been presented publicly by anyone or any organisation. The accusations of any inappropriate ties with the Russian government are based on false allegations and inaccurate assumptions, including the claims about Russian regulations and policies impacting the company.”

這家網(wǎng)絡(luò)安全公司還表示：“任何人或任何組織都沒(méi)有公開(kāi)出示過(guò)可信的證據(jù)。指控本公司與俄羅斯政府存在任何不當(dāng)聯(lián)系的說(shuō)法，都是基于錯(cuò)誤的陳述和不準(zhǔn)確的假設(shè)，包括有關(guān)號(hào)稱對(duì)本公司有影響的那些俄羅斯法規(guī)政策的說(shuō)法。”

Kaspersky is one of the most popular anti-virus products worldwide, with more than 400m users. It is used by a number of large businesses within the UK besides Barclays. The company began offering a pared-back version of its main anti-virus software for free to anyone in July.

卡巴斯基是全球最受歡迎的殺毒產(chǎn)品之一，用戶逾4億。英國(guó)境內(nèi)除巴克萊外還有多家大公司使用該軟件。卡巴斯基今年7月推出了面向所有人的簡(jiǎn)易免費(fèi)版殺毒軟件。

The British government has not publicly announced a position on the software provider. Concerns over Kaspersky being used as a Russian government proxy in Britain were nevertheless so great that the matter was also brought to the attention of Boris Johnson, the foreign secretary.

英國(guó)政府還未公開(kāi)表明對(duì)這家軟件提供商的立場(chǎng)。然而，在英國(guó)，有關(guān)卡巴斯基為俄羅斯政府效力的擔(dān)憂情緒彌漫，以至于此事被提請(qǐng)英國(guó)外交大臣鮑里斯•約翰遜(Boris Johnson)注意。

“Kaspersky Lab continues to work with Barclays to provide its customers with internet security. Barclays, through its global reach, has done much to improve public awareness of cyber security threats and we look forward to continuing our relationship to help keep its customers protected online,” said Adam Maskatiya, general manager for UK and Ireland at Kaspersky.

卡巴斯基英國(guó)和愛(ài)爾蘭地區(qū)總經(jīng)理亞當(dāng)•馬斯卡提亞(Adam Maskatiya)說(shuō)：“卡巴斯基實(shí)驗(yàn)室繼續(xù)與巴克萊合作，保障巴克萊客戶的網(wǎng)絡(luò)安全。影響力遍及全球的巴克萊在提高公眾對(duì)網(wǎng)絡(luò)安全威脅認(rèn)知方面做了大量工作，我們期待延續(xù)我們的合作關(guān)系，保障其客戶的網(wǎng)絡(luò)安全。”

Kaspersky has its headquarters in Russia and is headed by Eugene Kaspersky, a former KGB-trained Soviet military intelligence officer. Concerns over its connections to the Russian secret state have been prevalent in western intelligence circles for some years.

卡巴斯基的總部設(shè)在俄羅斯，由接受過(guò)克格勃(KGB)訓(xùn)練的前蘇聯(lián)軍事情報(bào)官員尤金•卡斯佩爾斯基(Eugene Kaspersky)執(zhí)掌。一些年來(lái)，對(duì)卡巴斯基與俄羅斯秘密機(jī)構(gòu)之間有關(guān)聯(lián)的擔(dān)憂在西方情報(bào)圈中一直普遍存在。

At the heart of the current furore is a continuing FBI investigation into the leak of a trove of sensitive US cyber weapons. Hacking tools developed by the US National Security Agency were dumped online by a group known as the Shadow Brokers last year. US officials believe the group to be a Russian proxy. They believe the group acquired the trove from an NSA employee, who had illegally taken NSA tools home with him. He used Kaspersky anti-virus software on his home computer.

目前這場(chǎng)風(fēng)波的核心是美國(guó)聯(lián)邦調(diào)查局(FBI)對(duì)一批敏感的美國(guó)網(wǎng)絡(luò)攻擊工具遭泄露一事的持續(xù)調(diào)查。去年，一個(gè)叫做“影子經(jīng)紀(jì)人”(Shadow Brokers)的組織將美國(guó)國(guó)家安全局(NSA)開(kāi)發(fā)的一批黑客工具發(fā)到了網(wǎng)上。美國(guó)官員認(rèn)為該組織為俄羅斯效力。他們認(rèn)為，該組織從美國(guó)國(guó)家安全局一名雇員手中獲取了這批工具，這名雇員違規(guī)將美國(guó)國(guó)安局的工具帶回家中。他家中的電腦使用卡巴斯基殺毒軟件。

Kaspersky has since admitted that its software did detect and download the NSA tools from the employee’s home computer.

卡巴斯基后來(lái)承認(rèn)，其軟件的確從這名雇員家中的電腦上檢測(cè)并下載了美國(guó)國(guó)安局的工具。

“Kaspersky Lab security software, like all other similar solutions from our competitors, has privileged access to computer systems to be able to resist serious malware infections and return control of the infected system back to the user. In the mentioned incident, our systems pulled back a zip archive detected as malicious and which, when opened, was found to contain both malicious and source code files. The latter were then deleted,” the company said.

卡巴斯基表示：“卡巴斯基實(shí)驗(yàn)室的安全軟件，就像我們競(jìng)爭(zhēng)對(duì)手提供的所有其他類似解決方案一樣，對(duì)計(jì)算機(jī)系統(tǒng)有較高的訪問(wèn)權(quán)限，由此能抵御嚴(yán)重惡意軟件的感染，并將被感染系統(tǒng)的控制權(quán)交還給用戶。在提到的那起事件中，我們的系統(tǒng)提取了一個(gè)被檢測(cè)為惡意的zip壓縮包，打開(kāi)這個(gè)壓縮包后發(fā)現(xiàn)，其中包含惡意代碼文件和源代碼文件。之后后者被刪除。”

In a statement in September, announcing the ban on all Kaspersky products in US governmental organisations, the US Department of Homeland Security said: “The department is concerned about the ties between certain Kaspersky officials and Russian intelligence and other government agencies, and requirements under Russian law that allow Russian intelligence agencies to request or compel assistance from Kaspersky and to intercept communications transiting Russian networks.”

今年9月，美國(guó)國(guó)土安全部在宣布禁止美國(guó)政府機(jī)構(gòu)使用卡巴斯基所有產(chǎn)品的聲明中表示：“我部對(duì)某些卡巴斯基高層人士與俄羅斯情報(bào)機(jī)構(gòu)及其他政府機(jī)構(gòu)之間的關(guān)系感到擔(dān)憂，也對(duì)如下情況感到擔(dān)憂，即俄羅斯法律的某些規(guī)定讓俄羅斯情報(bào)機(jī)構(gòu)可以請(qǐng)求或強(qiáng)制卡巴斯基給予協(xié)助、而且可以攔截通過(guò)俄羅斯網(wǎng)絡(luò)的通信。”