司法部起诉乌克兰女子，指其为俄罗斯国家支持的两个黑客组织攻击美国关键基础设施
美国司法部12月9日在华盛顿宣布，联邦大陪审团在加利福尼亚州中区提出两份起诉书，指控33岁的乌克兰公民 Victoria Eduardovna Dubranova 为俄罗斯国家支持的两个黑客组织 CyberArmyofRussia_Reborn（CARR）与 NoName057(16)（NoName）实施网络攻击与入侵，攻击目标包括美国多州的公共饮水系统等关键基础设施。Dubranova 今年早些时候已被引渡到美国，她就两案均不认罪，NoName 案定于2026年2月3日开审，CARR 案定于2026年4月7日开审。
起诉书称，俄罗斯政府为 CARR 与 NoName 提供资金等支持。司法部说，CARR 由俄罗斯联邦武装力量总参谋部情报总局（GRU）创立、出资并指挥，曾攻击美国多州公共饮水系统、造成控制设备损坏与数十万加仑饮用水泄漏，还曾在2024年11月攻击洛杉矶一家肉类加工厂，致数千磅肉品变质并引发氨气泄漏；CARR 还攻击过美国选举基础设施与核监管机构网站。NoName 则是由俄罗斯总统2018年10月下令设立的一家信息技术组织参与管理的国家认可项目，其成员用自研的分布式拒绝服务工具 DDoSia 攻击政府机构、金融机构、铁路与港口等目标，并以加密货币奖励发动攻击最多的志愿者。
CARR 案起诉 Dubranova 共谋损坏受保护计算机并篡改公共供水系统、损坏受保护计算机、接入设备欺诈与加重身份盗窃共四项罪名，若罪名成立最高可判27年联邦监禁；NoName 案起诉她一项共谋损坏受保护计算机罪名，最高可判5年。美国国务院同日宣布悬赏：提供 CARR 相关人员信息最高奖励200万美元，提供 NoName 相关人员信息最高奖励1,000万美元。两案由联邦调查局洛杉矶外地办公室在“红马戏团行动”框架下调查。起诉书只是指控，被告在被证明有罪之前推定无罪。
Ukrainian Woman Indicted Over Cyberattacks for Two Russian State-Sponsored Hacking Groups, Justice Department Says
The U.S. Department of Justice announced in Washington on December 9 that two indictments in the Central District of California charge Victoria Eduardovna Dubranova, 33, a Ukrainian national, with conducting cyberattacks and computer intrusions for two Russian state-sponsored hacking groups, CyberArmyofRussia_Reborn (CARR) and NoName057(16) (NoName), against critical infrastructure including public drinking water systems in several U.S. states. Dubranova was extradited to the United States earlier this year and pleaded not guilty in both cases; trial is set for February 3, 2026, in the NoName matter and April 7, 2026, in the CARR matter.
As described in the indictments, the Russian government backed both groups with financial support. The department said CARR was founded, funded and directed by the Main Directorate of the General Staff of the Armed Forces of the Russian Federation (GRU), attacked public drinking water systems across several states, damaging controls and spilling hundreds of thousands of gallons of drinking water, attacked a meat processing facility in Los Angeles in November 2024, spoiling thousands of pounds of meat and triggering an ammonia leak, and also attacked U.S. election infrastructure and websites of U.S. nuclear regulatory entities. NoName was a state-sanctioned project administered in part by an information technology organization established by order of the President of Russia in October 2018, whose members used their proprietary DDoS tool, DDoSia, against government agencies, financial institutions, railways and ports, and paid top-ranking volunteer attackers in cryptocurrency.
The CARR indictment charges Dubranova with conspiracy to damage protected computers and tamper with public water systems, damaging protected computers, access device fraud and aggravated identity theft, carrying a statutory maximum of 27 years in federal prison if convicted. The NoName indictment charges one count of conspiracy to damage protected computers, carrying a maximum of five years. The State Department the same day offered rewards of up to $2 million for information on individuals associated with CARR and up to $10 million for information on individuals associated with NoName. The FBI Los Angeles Field Office investigated both cases as part of Operation Red Circus. An indictment is merely an allegation, and the defendant is presumed innocent until proven guilty beyond a reasonable doubt.
来源：美国司法部
发布：GSM·美国（发布链接）
图片来源：图：位于美国华盛顿的美国司法部总部罗伯特·肯尼迪大楼（资料照片）。APK 摄，CC BY 4.0，经 Wikimedia Commons；联邦固定图库标准图。 / Photo: The Robert F. Kennedy Building, headquarters of the U.S. Department of Justice in Washington (file photo). Photo by APK, CC BY 4.0, via Wikimedia Commons
GSM Global · 本篇英文版 English edition of this story
