跟讀練習: NotPetya Attack - 通過影片學習英語口語
選擇練習模式
每種模式都會開啟全屏練習室。
137 句
如果句子過短或過長，請點選 Edit 進行調整。
1
This is one of the big cyber attacks.
2
NotPetya was the most damaging cyber attack in the history of the internet at the time.
3
And although it was a piece of malicious ransomware on the surface, the attack wasn't really about money.
4
It was about something much, much greater and much more sinister.
5
WannaCry, Petya, and NotPetya.
6
These were all infamous pieces of ransomware.
7
But NotPetya was in a league of its own.
8
As NotPetya spread and infected systems and security experts began to analyze it, a different reason for its creation emerged.
9
NotPetya was designed for cyber warfare.
10
When an entire country's infrastructure, such as the power grid, bus stations, banks, airports, and gas stations were affected by the most devastating a cyber attack to have ever occurred,
11
it became scarily apparent how much damage can be done with a cyber weapon.
12
No lives were lost due to NotPetya, but the impact was incomparable to any previous attack.
13
Hey, I'm Rob Witcher.
14
In this video series, we explore some of the biggest cybersecurity breaches in modern history.
15
If you find cybersecurity as fascinating as I do, then please subscribe and hit the bell icon to get notifications when we release new videos.
16
On June 27th, 2017, it was the summer eve of Ukrainian holiday Constitution Day.
17
Suddenly, computers around the country began to show one of two different screens,
18
a repairing file system on C with a stark warning to not turn the computer off, or a classic ransomware screen which read,
19
oops, your important files are encrypted, and demanded a payment of $300 worth of bitcoin to decrypt the files.
20
The attack began to spread across Ukraine, and then the globe.
21
It was reported by Kaspersky that within a single day, NotPetya had infected systems in France, Germany, Italy, Poland, the United Kingdom, and the United States.
22
The majority of infections, however, targeted Ukraine.
23
In fact, 80 % of infections in the first 24 hours were located in Ukraine.
24
As people's screens began to go black, no one truly realized that this was the beginning of the biggest cyber attack in history.
25
To understand not Petya, you first need to be familiar with Petya.
26
Petya was first discovered in March 2016, a piece of ransomware
27
that was said by Checkpoint at the time to have been immediately flagged as the next step in ransomware evolution.
28
It was named Petya after one of the Soviet weapons satellites from the James Bond movie, GoldenEye.
29
And in the hacking world, just like in the James Bond films, it's always the Russians, right?
30
2017 was a big year for ransomware attacks.
31
Just a month earlier, the infamous WannaCry attack had affected hundreds of thousands of computers across 150 countries, causing millions of dollars in damages.
32
And then in June, something even more damaging hit.
33
Kaspersky dubbed this new ransomware NotPetya.
34
This variant had major differences to the original Petya ransomware.
35
One of the main differences was that NotPetya had been created to spread quickly.
36
To date, it was simply one of the fastest propagating pieces of malware we've ever seen, said Craig Williams from Cisco's Talos division,
37
one of the very first security companies to investigate NotPetya and reverse engineer it.
38
He further told Wired, by the second you saw it, your data center was already gone.
39
NotPetya was spreading like wildfire, and it was targeting Ukraine's infrastructure.
40
And it then began to spread globally through companies who operate branches within Ukraine.
41
Anyone who thinks this was accidental is engaged in wishful thinking, Williams continued.
42
This was a piece of malware designed to send a political message.
43
If you do business in Ukraine, bad things are going to happen to you.
44
NotPetya affected countless small and large -scale companies, including Maersk, the world's largest container shipping company, Merck, a U .S pharmaceutical company,
45
Saint -Gobain, a French construction materials company, and even an Australian chocolate factory.
46
Various marketing firms, law firms, oil companies, and railway companies around the world were reeling from the chaos of NotPetya.
47
To understand this hack, it's worth knowing a little bit about the political context that led to it.
48
Russia and Ukraine have been engaged in an ongoing war since early 2014.
49
The conflict, like all conflicts, has a complex background, and some of the key moments surrounded Russia's annexation of the Ukrainian territory of Crimea
50
and conflicts surrounding the status of the Ukrainian region of Donbas.
51
According to human rights groups, around 13 ,000 Ukrainians have died since the conflict broke out in early 2014.
52
In 2017, NotPetya was quickly attributed to Russian hackers.
53
And this wasn't the first time Russians had used cyber warfare tactics against Ukraine.
54
Since 2014, they've attacked the Ukrainian power grid in the depths of the cold winter , attacked railways and other critical infrastructure,
55
and rigged election websites in their relentless hybrid warfare tactics.
56
Joshua Korman, a cybersecurity fellow at the Atlantic Council, said, The physics of cyberspace are wholly different from every other war domain.
57
And cyberspace has been one of the main fronts on this war from the start.
58
Russia have been essentially using Ukraine as a test lab for their latest innovations in cyber warfare.
59
Former Homeland Security Advisor Tom Bossert said that according to White House assessments, the NotPetya attack resulted in more than 10 billion,
60
with a B, billion in damages.
61
To put that into perspective, the previous WannaCry attack of the previous month resulted in an estimated 4 to 8 million in damages.
62
That's less than a tenth of a percent of the cost of NotPetya.
63
On October 20th, 2020, the United States Justice Department charged six Russian government hackers with the NotPetya attack
64
and the attacks on the power grid in the Ukraine.
65
No country has weaponized its cyber capabilities as maliciously or irresponsibly as Russia,
66
wantonly causing unprecedented damage to pursue small tactical advantages and to satisfy fits of spite, said John Demers, U .S.
67
Assistant Attorney General for National Security.
68
Today, the department has charged these Russian officers with conducting the most disruptive
69
and destructive series of computer attacks ever attributed to a single group, including unleashing the NotPetya malware.
70
No nation will recapture greatness while behaving in this way.
71
Strong words from the U .S.
72
NotPetya was so far -reaching and spread so quickly because it took advantage of two exploits, Eternal Blue and Mimikatz.
73
Used in tandem, these exploits allowed NotPetya to rip through machines around the world at a downright alarming rate.
74
Eternal Blue is the exploit created by the U .S.
75
National Security Agency, the NSA.
76
Eternal Blue takes advantage of a vulnerability in Windows SMB,
77
Server Message Block Protocol, a network protocol that enables users to communicate with remote computers and servers across a network.
78
Eternal Blue was leaked to the world in early 2017.
79
And although Microsoft had released a patch for the vulnerability as soon as it was disclosed, many computers around the world had not yet been patched.
80
MemeCats was an older invention created by a French security researcher in 2011.
81
It was released to show that Windows passwords could be found deep within RAM random access memory of a computer.
82
If hackers could gain even just guest accounts or limited access to a computer once inside,
83
they could use Mimikatz to find other users' passwords and hack into other computers using those same credentials.
84
The use of EternalBlue and Mimikatz together made for a scarily powerful piece of ransomware.
85
You can infect computers that aren't patched, and you can grab the passwords from those computers to infect computers that are patched,
86
said Benjamin Delpy, the researcher behind Mimikatz.
87
This meant that even patched computers weren't necessarily safe from the NotPetya rampage.
88
It was especially efficient within networks with multi -user computers, as it would automatically jump from one computer to the next within the network at lightning speeds.
89
It's often unclear whether paying the ransom associated with a ransomware
90
attack will actually allow users to gain access to their computers and files again.
91
But in this case, it was clear -cut.
92
No key existed to unencrypt the content.
93
NotPetya was purely built for one thing, maximum destruction.
94
It's also sometimes unclear whether a cyber attack can be labeled as cyber warfare.
95
But in the case of Notpetya, it was an open and shut case.
96
This was clearly an attack of cyber war against Ukraine, perpetrated by Russia.
97
The Linkos Group is a small, family -run Ukrainian software business.
98
They create and maintain a piece of software known as MEDOC, a piece of accounting software similar to TurboTax,
99
which almost everyone in the Ukraine uses to do their taxes online.
100
But on June 27th, 2017, the Linkos Group headquarters suddenly became ground zero for the release of the NotPetya ransomware.
101
Back in the spring of 2017, the hackers had targeted this small family -run business and hijacked their update servers.
102
They used these as a backdoor into thousands of Ukrainian households through the ME -DOC software, the accounting software that everyone uses and has downloaded on their computers.
103
By the summer of the same year, the Russians were poised and ready to pounce, using this backdoor to unleash the malicious software on the Ukraine and the world.
104
Being the most damaging cyber attack ever, you'd hope there'd be some takeaways from it.
105
So what have we learned from NotPetya?
106
Ransomware isn't going away.
107
Attacks are likely to get more and more sophisticated.
108
The best approach for any business is to assume that being hit by ransomware is inevitable.
109
It's going to happen.
110
This means having plans in place and knowing how to execute them
111
and knowing how long it would take to get things back up and running for your business.
112
It also means training in disaster recovery for these scenarios so
113
that everyone involved knows their roles and responsibilities in the case of a cyber incident like a ransomware attack.
114
You need to have a plan and you need to know
115
that that plan is going to work properly in the event of an actual cyber catastrophe such as NotPetya.
116
The importance of businesses taking back up seriously was highlighted especially clearly in the case of global shipping company Maersk, who reportedly didn't have proper backups in place.
117
The only reason they were able to access their data was
118
due to a power outage in one of their remote offices in Ghana.
119
A total fluke in West Africa had left one domain controller safe from the destructive forces of NotPetya,
120
and Maersk were luckily able to recover from this one data center that had been accidentally offline.
121
We need to be regularly backing up our data, and to help avoid ransomware, it is a good practice to use different encryption keys for our backups.
122
But the biggest thing we've learned from NotPetya is
123
that cyber warfare against a country's critical infrastructure isn't an abstract concept from science fiction anymore, something that might happen in the future.
124
Cyber weapons have already been used by governments against other nations.
125
It's a real issue that is occurring today, and it seems extremely likely that cyber warfare will only become more prevalent.
126
Notpetya's impact on Ukraine's infrastructure highlighted the far -reaching consequences of cyber attacks of this nature, affecting the power grid, transportation infrastructure, and banks.
127
Previous attacks have shown that healthcare infrastructure can also be vulnerable.
128
This is the beginning of a new age of warfare, attacking an enemy nation not just physically, but digitally as well.
129
This was one of the most fascinating and terrifying cyber attacks, and one of the costliest and most damaging to have ever occurred.
130
Although the U .S have officially charged Russian government hackers with the NotPetya attack, it doesn't seem likely that these attacks will disappear in any way.
131
In fact, it's highly plausible that an attack like this could happen against the United States or other countries.
132
It's clear
133
that countries need to be putting resources into trying to protect critical infrastructure from attacks such as this
134
and planning for disaster recovery when such an attack does occur.
135
If you found this video interesting and informative then please hit the thumbs up button
136
and let us know in the comments below what breaches you want us to cover in future videos.
137
See you in the next one.
FOR YOU
推薦影片
B21
364 句
World's Deadliest Computer Virus: WannaCry
Daily ConversationWorking Adults
B2104 句
High Drama In Kyiv: Russian Attack Begins As Germany's Merz Arrives; Zelensky Watches Helplessly
Daily ConversationWorking Adults
B21
454 句
Most Expensive Mistakes In History
Daily ConversationWorking Adults
B21
250 句
Solar Storm Could Black Out Half of America - This Map Shows Where
Daily ConversationWorking Adults
B27
23 句
Piratage du fisc : «Les cyberattaques qui touchent l'État ne sont pas du tout complexes», relève
Business EnglishDaily ConversationUniversity Students
B21
80 句
Python3 For Pentesting - Introduction
Daily ConversationUniversity StudentsWorking Adults
B21
36 句
THREE PREDICTIONS THAT WILL SHAKE THE WORLD
Daily ConversationWorking Adults
B21
131 句
The Worst Sponsorships in YouTube History
Daily ConversationWorking Adults
B27
63 句
What If Russia Started World War 3?
Daily ConversationWorking Adults
B23
16 句
pre-internet game piracy
Daily ConversationWorking Adults
B23
37 句
The Megatsunami That Struck the Entire Planet
Daily ConversationWorking Adults
B21
296 句
Windows Update Shouldn’t Be Allowed to Do This
Daily ConversationWorking Adults
本課的詞彙與口語要點
這段影片共有 137 個句子、2037 個單詞可供跟讀。 講話部分時長為 11:46。 說話人語速自然，每分鐘約 173 個詞，接近日常對話。 只有 76% 的單詞屬於英語最常用的 3,000 詞，詞彙難度較高。
影片中的重點詞彙
影片中 15 個值得學習的單詞，附發音和釋義：
| 單詞 | 發音 | 釋義 |
|---|---|---|
| infrastructure 名詞 | /ˈɪnfɹəˌstɹʌkt͡ʃə/ | 基礎設施 /基礎設施 |
| warfare 名詞 | /ˈwɔɹfɛɹ/ | 戰爭 /戰爭 |
| grid 名詞 | /ɡɹɪd/ | 網格 /網格, 格子 |
| server 名詞 | /ˈsɝvɚ/ | 伺服器 /伺服器, 伺服器 |
| password 名詞 | /ˈpæs.wɜɹd/ | 密碼 /密碼, 口令 |
| exploit 名詞 | /ˈɛksplɔɪt/ | 功勛 /功勳, 勛績 /勳績 |
| occur 動詞 | /əˈkɜː/ | 發生 /發生 |
| railway 名詞 | /ˈɹeɪlˌweɪ/ | 鐵路 /鐵路, 鐵道 /鐵道 |
| remote 形容詞 | /ɹəˈməʊt̞/ | 遠 /遠, 遙遠 /遙遠 |
| disaster 名詞 | /dɪˈzɑːs.təː/ | 災難 /災難, 災害 /災害 |
| infection 名詞 | /ɪnˈfɛkʃən/ | 傳染 /傳染 |
| domain 名詞 | /ˌdəʊˈmeɪ̯n/ | 領域 /領域 |
| backup 名詞 | /ˈbækˌʌp/ | 備份 /備份 |
| highlight 動詞 | /ˈhaɪˌlaɪt/ | 凸顯 /凸顯, 強調 /強調 |
| tactics 名詞 | /ˈtæktɪks/ | 戰術 /戰術 |
影片中出現的短語動詞
| 單詞 | 釋義 |
|---|---|
| go away 動詞 | 離開 /離開, 走 |
影片中的語法
說話人最常用的結構，並附上影片中的原話：
| 結構 | 影片中的用法 |
|---|---|
| 現在完成時 have/has + 過去分詞 — 過去發生但與現在仍有關聯的事 | we've ever seen · have been engaged · they've attacked |
| 被動語態 be + 過去分詞 — 強調發生了什麼，而不是誰做的 | was designed · were affected · can be done |
需要注意的發音
說話人用了 14 次縮略和弱讀形式，例如 isn't, wasn't, we've。請按聽到的簡短形式來說。
- “th” 音: thumb /ˈθʌm/, tenth /tɛnθ/
- “sh” 和 “zh” 音: infection /ɪnˈfɛkʃən/, malicious /məˈlɪʃəs/, fiction /ˈfɪkʃən/, efficient /ɪˈfɪʃənt/, essentially /ɪˈsɛnʃəli/
- 長單詞——注意重音位置: infrastructure /ˈɪnfɹəˌstɹʌkt͡ʃə/, vulnerability /ˌvʌln(ə)ɹəˈbɪlɪti/, necessarily /ˌnɛs.əˈsɛɹ.ə.li/, essentially /ɪˈsɛnʃəli/, evolution /ˌiːvəˈluːʃ(ə)n/
如何用這段影片練習
- 先完整聽一遍影片，不要開口，記下不認識的單詞。
- 先用 0.75 倍速逐句跟讀，熟練之後再回到正常速度。
- 錄下自己的聲音並與原聲對比，特別注意 infrastructure, warfare, grid 這類單詞。
什麼是跟讀法？
跟讀法 (Shadowing) 是一種有科學依據的語言學習技巧，最初開發用於專業口譯員的培訓，並由多語言者Alexander Arguelles博士普及。這個方法簡單而強大：您在聽英語母語原聲的同時立即大聲重複——就像是一個延遲1-2秒緊跟說話者的影子。與被動聽力或語法練習不同，跟讀法強迫您的大腦和口腔肌肉同時處理並模模擬實的講話模式。研究表明它能顯著提高發音準確性，語調，節奏，連讀，聽力理解和口語流利度——使其成為雅思口語備考和真實英語交流最有效的方法之一。