2023 미국 사이버 보안 컨퍼런스에서 폴 아베잇 FBI 부국장의 기조연설로, 사이버 보안의 현문제와 FBI의 노력에 대한 내용입니다.
고유명사와 편집이 조금 되어서 원문과 살짝 다릅니다.
1 | ransomware | 랜섬웨어 |
2 | reconnaissance | 정찰, 수색 |
All of us here know that today’s cyber threats hit a wider array of victims and carry the potential for greater damage than ever before. The threats are evolving rapidly, and the stakes have never been higher. And more and more, it is becoming difficult to discern where cybercriminal activity ends and adversarial nation-state activity begins, as the line between the two has become increasingly blurred, and hybrid models between the two begun to emerge.
Over the past two years, the FBI has seen a wider-than-ever range of malicious cyber actors lawlessly threatening our country U.S. economic and national security and our citizens. Today, we are investigating more than 100 different ransomware variants, each with scores of victims, wreaking havoc on business operations, causing devastating financial losses, and targeting everything from hospitals to emergency services, to the energy and other critical infrastructure sectors and state and local government components as well.
At the same time, we are dealing with a host of unique threats from nation-states aimed at disrupting and undermining our democratic society and the freedoms we all value so much. Foreign adversaries like the governments of China, Russia, Iran, and North Korea use cyber operations to illegally achieve their strategic economic, political, and other objectives. Their objectives include financial gain, theft of information and intellectual property, malign influence campaigns, and advanced preparations to disrupt our critical infrastructure.
China, in particular, poses a highly formidable cyber threat on the cyberfront on a scale that is unparalleled among foreign adversaries. It has a bigger hacking program than every other major nation combined, and it has stolen more U.S. personal and corporate data than all other nations, big or small, combined.
But the government of China is not the only hostile nation-state using cyberattacks to take aim at U.S. victims. This time a year ago, hackers sponsored by the Iranian government were in the news when we revealed a particularly appalling cyberattack they’d attempted in 2021 on a children’s hospital.
Fortunately, before they could successfully launch their attack, we received a tip from a partner that the hospital had been targeted and were able to identify and defeat the threat, protecting both the network and the children.
But in addition to China and Iran, the cyber threat posed by Russia has also recently come to the forefront. Since the Russian invasion of Ukraine began, we have taken unprecedented steps to identify, report on, and take action to help and assist in addressing cyber threats targeting Ukraine. And that is not just because we’re trying to be good international partners, but it is also because while Russia’s invasion may be taking place halfway around the world, its effects can be felt right here at home.
We have seen, for instance, Russia conducting reconnaissance on the U.S. energy sector. That is particularly worrisome because we know that once access is established, a cyber actor can switch from information gathering to attack quickly and without notice. So we have been working with our partner agencies to provide advance warning and work with companies being targeted by Russia.
And that work is being carried out by FBI field offices across the country, including right here in Boston because even when a threat is global in nature, the response to it must take place on a local level as well.