新华网10月31日电 据美国科技博客Gizmodo报道,最近我们听说了黑客能在深海造成什么灾难,但目前所有的新闻仅限于安全研究员之间,他们是为了研究如果轮船的导航系统被黑会造成什么灾难。不过现在这些新闻都过时了。

一艘伊朗油轮最近黑了船上的自动识别系统(AIS),使得自己在系统上看不到了,也许是为了躲避国际制裁。Ramtin号原油运输船本月初离开伊朗港口并向新加坡行进。但是在半路上,船上的海事移动服务认证系统(MMSI)不明不白地把船认证成为了更小的油轮Hamodo K号。海事博客gCaptain指出,这里面肯定有问题:

Ramtin的IMO编号没变,但是MMSI编号成了Hamoda K号的,这艘船不在OFAC的黑名单上。这种“共享”身份的做法和两艘船行动在时间上的紧密性,看起来像是Hamoda K号被操控来掩盖Ramtin号在马来西亚附近水域的活动。

Ramtin号由Tabuk海事公司运营,这家公司受到美国财政部海外资产控制办公室(OFAC)的制裁。

官方表示,这艘船自己攻破了AIS系统,把身份变成了另一家不受制裁的船的身份。我们了解到这个情况已经持续几个星期了,有安全调查员报告称AIS系统的结构有弱点。

所以现在,海事官员有充分的理由来加强船只追踪系统的安全性了。逃避制裁来销售原油是一回事,但是如果涉及到国际武器销售,那么问题就严重得多了。如果伊朗能这么做,那么任何国家都能做。

译者:林杉

百度新闻与新华网国际频道合作稿件,转载请注明出处。

An Iranian Oil Tanker Hacked Its Own Tracking System to Avoid Detection

Lately, we've seen how hackers can cause havoc on the high seas, but the shenanigans have been limited to security researchers for the most part. They wanted to prove that it was possible to do things like take over a ship's navigation system so that it doesn't happen in real life. Welp, too late for that now.

An Iranian ship recently made itself essentially disappear after hacking into its own Automatic Identification System (AIS), perhaps to get around international sanctions. Said vessel, the crude oil tanker Ramtin (formerly known as Volga), left port in Iran earlier this month on its way towards Singapore. However, on the way, its Maritime Mobile Service Identity (MMSI) inexplicably changed to match that of a much smaller tanker, Hamodo K. As the maritime blog gCaptain points out, this is shady:

The Ramtin still has its same IMO number, but its MMSI number is now that of the Hamoda K, a vessel which is not on the OFAC blacklist. This “sharing” of identity, together with the close proximity in time of the operations, appears to indicate that the Hamoda K is being manipulated to disguise Ramtin s activities near Malaysia.

Indeed, the Ramtin is operated by Tabuk Maritime, a company that is sanctioned by the Office of Foreign Assets Control (OFAC).

It sounds like the vessel was up to no good. Authorities believe that the Ramtin hacked into its own AIS and nabbed an identify from a similar however unsanctioned ship. We've known that this sort of thing was possible for at least a couple weeks now, after some security researchers reported on how vulnerable the AIS infrastructure was.

So now, maritime authorities have some real motivation to bolster the security of ship tracking systems. Skirting around sanctions to sell crude oil is one thing, but there's quite obviously a more worrisome scenario that would involve things like the international weapons trade. And hey, if Iran can do it, anyone can.

(原标题:伊朗油轮自黑追踪系统避免被发现)