網路犯罪分子襲擊薩爾瓦多，暴露 Chivo 錢包和公民數據

網路犯罪組織 CiberInteligenciaSV 已經危害了薩爾瓦多政府的安全，洩露了比特幣錢包 Chivo 的源代碼、VPN 憑證以及 510 萬薩爾瓦多人的個人資訊。駭客威脅稱，除非政府官員進行對話，否則他們將公佈更多數據。該組織的動機尚不清楚，但該事件凸顯了加密貨幣領域 KYC 和集中式資料庫的漏洞。

Cybercriminals Threaten El Salvador Government, Release Sensitive Data of Chivo Bitcoin Wallet and Citizens

網路犯罪分子威脅薩爾瓦多政府，洩露 Chivo 比特幣錢包和公民的敏感數據

In a brazen act of cyberterrorism, a group of hackers known as "CiberInteligenciaSV" has unleashed a double blow on the government of El Salvador, compromising the security of its official Chivo Bitcoin wallet and exposing the personal information of millions of citizens.

一群名為「CiberInteligenciaSV」的駭客實施了無恥的網路恐怖主義行為，對薩爾瓦多政府造成了雙重打擊，破壞了其官方 Chivo 比特幣錢包的安全，並暴露了數百萬公民的個人資訊。

Source Code and VPN Credentials Leaked

原始碼和 VPN 憑證洩露

On April 23rd, CiberInteligenciaSV released the source code and VPN access credentials of the Chivo wallet on BreachForums, a notorious black hat hacking forum. This confidential information gives malicious actors the ability to manipulate the wallet, potentially leading to financial losses for users.

4 月 23 日，CiberInteligenciaSV 在臭名昭著的黑帽駭客論壇 BreachForums 上發布了 Chivo 錢包的源代碼和 VPN 訪問憑證。這些機密資訊使惡意行為者能夠操縱錢包，從而可能給用戶帶來經濟損失。

The hackers claim to have ulterior motives, hinting at a desire to engage in dialogue with senior political leaders or extort the government.

駭客聲稱別有用心，暗示希望與高級政治領袖進行對話或勒索政府。

Massive Data Breach Exposes Citizens' Privacy

大規模資料外洩揭露公民隱私

Just days before the Chivo wallet leak, CiberInteligenciaSV had breached a database containing the personal information of 5.1 million Salvadorans. This colossal data dump included names, identification numbers, dates of birth, addresses, and facial images.

就在 Chivo 錢包洩漏的前幾天，CiberInteligenciaSV 洩漏了一個包含 510 萬個薩爾瓦多人個人資訊的資料庫。這個龐大的資料轉儲包括姓名、身分證號碼、出生日期、地址和臉部影像。

The compromised information is believed to have been obtained from the Chivo wallet, where users are required to provide their personal details for KYC compliance. This incident highlights the potential dangers of centralized databases in the cryptocurrency world, where sensitive information can be easily exploited.

據信，洩露的資訊是從 Chivo 錢包獲得的，用戶需要提供個人詳細資訊以確保符合 KYC 要求。這事件凸顯了加密貨幣世界中中心化資料庫的潛在危險，敏感資訊很容易被利用。

Government's Response

政府的回應

The Salvadoran government has remained conspicuously silent in the face of these cyberattacks. The lack of a swift and transparent response has raised concerns about the government's ability to protect its citizens' data and maintain the integrity of its Bitcoin infrastructure.

面對這些網路攻擊，薩爾瓦多政府一直保持沉默。缺乏迅速和透明的反應引發了人們對政府保護公民資料和維護比特幣基礎設施完整性的能力的擔憂。

Chivo Wallet's Troubled History

Chivo 錢包的麻煩歷史

The Chivo wallet, launched in September 2021, has faced numerous technical issues and complaints from users. Despite being touted as a tool to bring financial inclusion, many Salvadorans have reported difficulties in using the wallet and redeeming the promised $30 bonus.

Chivo 錢包於 2021 年 9 月推出，面臨許多技術問題和用戶投訴。儘管被吹捧為實現金融包容性的工具，但許多薩爾瓦多人表示在使用錢包和兌現承諾的 30 美元獎金方面存在困難。

El Salvador's Bitcoin Ambitions

薩爾瓦多的比特幣野心

Despite the setbacks, El Salvador remains committed to its Bitcoinization efforts. The country has been investing heavily in Bitcoin-related infrastructure, including Lightning Network technology and "Volcano bonds," which aim to attract investment and reduce debt.

儘管遇到挫折，薩爾瓦多仍致力於比特幣化的努力。該國一直在大力投資比特幣相關基礎設施，包括閃電網路技術和“火山債券”，旨在吸引投資並減少債務。

Cryptocurrency Evolution in Latin America

拉丁美洲的加密貨幣演變

The cyberattacks on El Salvador serve as a wake-up call for governments and private companies alike. As Latin America continues to embrace cryptocurrencies, it is imperative to implement robust cybersecurity measures and protect users' sensitive data.

薩爾瓦多的網路攻擊給政府和私人企業敲響了警鐘。隨著拉丁美洲繼續接受加密貨幣，必須實施強有力的網路安全措施並保護用戶的敏感資料。

The race for cryptographic evolution in the region is accelerating, with countries such as El Salvador leading the charge. However, it is crucial to balance innovation with security and ensure that citizens' financial well-being and privacy are not compromised.

該地區的加密貨幣演進競賽正在加速，薩爾瓦多等國家處於領先地位。然而，平衡創新與安全並確保公民的財務福祉和隱私不受損害至關重要。

Urgent Need for Action

迫切需要採取行動

The government of El Salvador must take immediate action to address the cyberattacks and reassure its citizens. It must work closely with cybersecurity experts to patch vulnerabilities, investigate the breaches, and bring the perpetrators to justice.

薩爾瓦多政府必須立即採取行動應對網路攻擊並安撫其公民。它必須與網路安全專家密切合作，修補漏洞、調查違規行為並將肇事者繩之以法。

Furthermore, the government should re-evaluate its KYC policies and explore alternative methods of user identification that prioritize privacy and security.

此外，政府應重新評估其 KYC 政策，並探索優先考慮隱私和安全的使用者識別替代方法。

The cryptocurrency industry must also play a role in protecting users. Exchanges and wallet providers should implement multi-factor authentication, cold storage, and other security measures to minimize the risk of hacks.

加密貨幣產業還必須在保護用戶方面發揮作用。交易所和錢包提供者應實施多因素身份驗證、冷儲存和其他安全措施，以最大程度地減少駭客攻擊的風險。

Conclusion

結論

The cyberattacks on El Salvador are a stark reminder of the evolving threats facing governments and citizens in the digital age. Robust cybersecurity measures, responsible data handling practices, and international cooperation are essential to protect financial systems, personal information, and the future of cryptocurrency adoption.

薩爾瓦多的網路攻擊清楚地提醒人們，數位時代政府和公民面臨著不斷變化的威脅。強大的網路安全措施、負責任的資料處理實務和國際合作對於保護金融系統、個人資訊和加密貨幣採用的未來至關重要。