解釋性報導：駭客可能入侵我家的冰箱嗎？

作者：雨果・洛梅代、李歐・馬尚東By Hugo Lhomedet and Leo Marchandon

10月13日（路透社）——駭客破壞數百家法國超市的冷藏系統，利用的是設備連網程度日益提高的趨勢；這些設備過去大多是機械式裝置。Oct 13 (Reuters) - Hackers who sabotaged refrigeration systems at hundreds of French supermarkets exploited the growing connectivity of equipment that was once largely mechanical.

從冰箱、暖氣系統，到監視器、警報網路，越來越多設備如今可遠端監控和控制，也為網路犯罪分子創造新的可乘之機。From refrigerators and heating systems to security cameras and alarm networks, an expanding range of devices can now be monitored and controlled remotely, creating new opportunities for cybercriminals.

駭客真的能入侵我家的冰箱嗎？CAN HACKERS REALLY GET INTO MY FRIDGE?

理論上可以。只要裝置連上網際網路，無論是直接連線，或是透過應用程式、雲端服務或家用網路連線，都有可能遭到入侵。In theory, yes. If a device is connected to the internet, directly or through an app, cloud service or home network, it can potentially be hacked.

2015年，研究人員在拉斯維加斯一場駭客大會上示範三星智慧冰箱如何可能遭到攻破，使他們得以攔截部分通過該裝置的網路流量。In 2015, researchers demonstrated at a Las Vegas hacking conference how a Samsung smart refrigerator could be compromised, allowing them to intercept some of the internet traffic passing through the device.

在許多情況下，攻擊者更感興趣的是竊取資料、癱瘓服務，或利用連網裝置作為進入更大型網路的入口。In many cases, attackers are more interested in stealing data, disrupting services or using connected devices as a way into a larger network.

哪些家用裝置可能遭駭？WHAT HOUSEHOLD DEVICES COULD BE HACKED?

最常見的目標，是連上網際網路並可遠端控制的裝置。The most common targets are devices connected to the internet and controlled remotely.

這些包括監視器、視訊門鈴、警報系統、智慧門鎖、恆溫器和中央暖氣系統。冰箱、烤箱和洗衣機等智慧家電若連上更廣泛的網際網路，也可能存在漏洞。如今甚至有些牙刷也已連上網路。These include security cameras, video doorbells, alarm systems, smart locks, thermostats and central heating systems. Smart appliances such as refrigerators, ovens and washing machines can also be vulnerable if they are connected to the wider internet. Even some toothbrushes are now internet-connected.

資安產業數據顯示，在所有針對連網裝置的攻擊中，路由器而非家電占了超過四分之三。Routers, not appliances, account for more than three-quarters of all attacks on connected devices, according to security-industry data.

隨著製造商為過去完全機械式的產品加入網路連線功能，這類裝置的數量迅速增加。The number of such devices has grown rapidly as manufacturers have added internet connectivity to products that were once entirely mechanical.

駭客實際上能做什麼？WHAT COULD A HACKER ACTUALLY DO?

一旦進入裝置，駭客通常可以做兩件事之一：蒐集資訊，或控制裝置。Once inside a device, a hacker can generally do one of two things: gather information or take control of the device.

攝影機可以顯示家中內部情況，配有麥克風的裝置可以收音，而遭攻破的路由器可能暴露所有經由該網路傳輸的內容。A camera can show the inside of a home, a device with a microphone can pick up sound, and a compromised router can expose everything that travels through the network.

取得裝置控制權的駭客可以開啟或關閉裝置、變更設定，或將使用者鎖在自己的帳號之外。遭攻破的恆溫器可能影響暖氣，遭駭的冷凍庫或冰箱則可能干擾溫度控制。Hackers who take control of a device can switch it on or off, change settings or lock users out of their accounts. A compromised thermostat could affect heating, while a hacked freezer or refrigerator could disrupt temperature controls.

在更嚴重的情況下，攻擊者可能利用安全防護不足的裝置，存取同一網路上的其他系統，或竊取與線上帳號相關的個人資訊。In more serious cases, attackers may use poorly secured devices to gain access to other systems on the same network or to steal personal information linked to online accounts.

駭客可能接管我的汽車、電力或供水嗎？COULD HACKERS TAKE OVER MY CAR, ELECTRICITY OR WATER SUPPLY?

資安研究人員已多次展示連網車輛存在的漏洞。Cybersecurity researchers have repeatedly demonstrated vulnerabilities in connected vehicles.

2015年，研究人員透過一輛行進中Jeep的連網娛樂系統遠端取得控制權，迫使業者召回約140萬輛車並部署軟體修補程式。In 2015, researchers remotely took control of a moving Jeep through its internet-connected entertainment system, forcing the recall of about 1.4 million vehicles and the deployment of software fixes.

近10年後，研究人員揭露一項漏洞，使他們只需車牌號碼，就能追蹤、解鎖並啟動特定起亞（Kia）車款。研究人員表示，他們已向起亞通報這些漏洞，起亞在數個月內修復；且沒有證據顯示這些漏洞曾在真實攻擊中遭利用。Nearly a decade later, researchers disclosed a flaw that allowed them to track, unlock and start certain Kia vehicles using only a licence plate number. The researchers said they reported the vulnerabilities to Kia, which fixed them within months, and there was no evidence they had been exploited in real-world attacks.

現代車輛和飛機也設計了大量安全與備援系統。Modern vehicles and aircraft are also designed with extensive safety and backup systems.

電力和供水網路等關鍵基礎設施，通常具備消費性裝置所沒有的多層安全防護、監控和監管機制。Critical infrastructure such as power and water networks generally has multiple layers of security, monitoring and regulation that are not present in consumer devices.

這不代表它們不會遭受網路攻擊，但相較於連上家用Wi‑Fi網路的家電，它們通常是困難得多的目標。That does not mean they are immune from cyber attacks, but they are typically much harder targets than a household appliance connected to a home Wi‑Fi network.

民眾該如何保護自己的裝置？HOW CAN PEOPLE PROTECT THEIR DEVICES?

資安專家通常建議更改預設密碼，在可用時啟用雙因素驗證，並定期安裝軟體更新。Cybersecurity experts generally recommend changing default passwords, enabling two-factor authentication where available and regularly installing software updates.

消費者也應移除或更換已不再接收安全更新的裝置，讓多數裝置維持在區域網路內，並且只有在有明確理由時，才將產品連上更廣泛的網際網路。Consumers should also remove or replace devices that no longer receive security updates, keep most devices on a local network and only connect products to the wider internet when there is a clear reason to do so.

最簡單的原則往往也最有效：連網裝置越少，攻擊者可利用的潛在入口就越少。The simplest rule is often the most effective: the fewer connected devices you have, the fewer potential entry points exist for attackers.

（雨果・洛梅代、李歐・馬尚東報導；麥特・史卡芬編輯）(Reporting by Hugo Lhomedet and Leo Marchandon; Editing by Matt Scuffham)