TIFFANY MAY, KIUKO NOTOYA2026年10月14日日本遭遇了一波网络攻击，企业和政府均受影响。 Haiyun Jiang/The New York TimesA wave of cyberattacks has wreaked havoc in Japan over the past few weeks, leaving virtually no industry untouched and the government searching for answers about how to bolster its defenses.过去几周，一波网络攻击席卷日本，造成严重混乱，几乎没有哪个行业能够幸免。日本政府正在设法寻找加强网络防御的对策。The hackers have tampered with servers, taken local government websites offline and gained access to large tranches of consumer data. Masaaki Taira, Japan’s former digital minister who leads a cybersecurity committee within the ruling Liberal Democratic Party, declared on Friday that Japan was in “a state of emergency in cyberspace.”黑客篡改服务器、使地方政府网站陷入瘫痪，并获取了大量消费者数据。日本前数字大臣、执政党自民党网络安全委员会负责人平将明周五宣称，日本处于“网络空间紧急状态”。Experts said that the attackers were most likely motivated by money. After paralyzing operations, they could attempt to extort local governments and companies into paying large ransoms, or sell the stolen information.专家表示，攻击者最有可能是出于经济利益的驱动。他们在瘫痪相关机构的运营后，可能试图勒索地方政府和企业索取巨额赎金，或出售窃取的信息。“Their actions may result in the suspension or degradation of systems and services that are important to society,” said Katsunari Yoshioka, a professor at Yokohama National University and an expert in systems security.横滨国立大学教授、系统安全专家吉冈克成表示：“他们的行为可能导致对社会至关重要的系统和服务中断或性能下降。”A study by TrendAI, a cybersecurity software company, found 600 cyberattacks were reported in Japan in the first nine months of 2026, more than the total number in 2025.网络安全软件公司TrendAI的一项研究发现，2026年前九个月，日本报告了600起网络攻击，超过2025年全年总数。In the past two weeks, a public university had to cancel classes for a week after its servers were attacked. A car-sharing service said that more than one million personal documents had been leaked, including headshots on driver’s licenses and home addresses. A ransomware attack on a cloud service operator owned by SoftBank affected almost 500 companies and local governments, including a rail operator and a police headquarters.过去两周内，一所公立大学的服务器遭到攻击后不得不停课一周；一家汽车共享服务公司表示，超过100万份包含个人信息的文件遭到泄露，其中包括驾照上的大头照和家庭住址；软银旗下的一家云服务运营商遭到勒索软件攻击，波及近500家企业和地方政府，其中包括一家铁路运营商和一个警察总部。Ransomware attacks have caused major problems in recent years well before A.I., but experts said artificial intelligence may have made these attacks easier.早在人工智能出现之前，勒索软件攻击就已在近年造成严重问题，但专家表示，人工智能可能让发动这些攻击变得更加容易。Toshiharu Furukawa, Japan’s minister of digital transformation, said at a news conference on Friday in Tokyo that the cyberattacks were reaching “across all sectors.”日本数字转型大臣古川俊治周五在东京的新闻发布会上说，网络攻击正波及“所有行业”。上个月，日本数字转型大臣古川俊治在东京出席活动。Why Japan?为什么是日本？As the world’s fourth-largest economy that produces many of the world’s robots, cars and electronics, Japan has long been an attractive target for hackers. Even though it was an early adopter of technology, its cybersecurity infrastructure is underdeveloped, according to experts.日本是世界第四大经济体，也是全球许多机器人、汽车和电子产品的生产国，长期以来它一直是黑客眼中的理想攻击目标。专家指出，尽管日本很早就开始采用新技术，但其网络安全基础设施仍然不够完善。A Microsoft report found that, in 2026, Japan was second only to Taiwan as the most frequently affected by cyberthreats in Asia. The International Institute for Strategic Studies, a London think tank, placed Japan in the lowest of three tiers ranking countries on their cyber capabilities in a 2021 assessment. The report noted that Japan’s military had avoided offensive cybersecurity strategies in the past, in part because of the pacifist constitution the country enacted after World War II.微软的一份报告发现，2026年，日本是亚洲遭受网络威胁最频繁的地区之一，仅次于台湾。伦敦智库国际战略研究所2021年对各国网络能力进行评估时，将日本列入三个等级中的最低一级。报告指出，日本军方过去一直避免采取进攻性的网络安全战略，部分原因是日本在第二次世界大战后制定的和平宪法。Artificial intelligence has also turbocharged the work of hackers, experts say. Automated systems can now scan websites for vulnerabilities around the world and around the clock.专家表示，人工智能还大大提高了黑客的攻击效率。自动化系统现在可以全天候扫描全球网站，寻找安全漏洞。Takahiro Anno, a technologist and founder of a political party focused on A.I., said while the Japanese language had once hindered international hackers, A.I.-generated translations have made phishing campaigns more persuasive.技术专家、一个以人工智能为重点的政党的创始人安野贵博表示，过去日语曾是国际黑客发动攻击的一道障碍，但人工智能生成的翻译让网络钓鱼攻击更具迷惑性。“Until recently — specifically up to about five years ago — Japan seemed relatively insulated from ransomware attacks and similar threats” he said in an interview. “It is very clear in emails or on phone calls when someone cannot speak Japanese fluently, so phishing campaigns were not that successful.”“直到最近——具体说大约五年前——日本似乎相对不受勒索软件攻击和类似威胁影响，”他在采访中说。“如果一个人日语说得不流利，无论是在电子邮件还是电话中，都很容易被察觉，因此网络钓鱼攻击的成功率并不高。”Ko Fujii, a technology expert and the founder of Makaira, a public affairs agency, said the recent wave of cyberattacks was unlikely to be part of a coordinated, state-sponsored geopolitical attack, according to his agency’s preliminary analysis.公共事务咨询公司Makaira创始人、技术专家藤井宏一郎说，根据该机构初步分析，最近这波网络攻击不太可能是一次由国家支持、经过协调的地缘政治攻击行动。“Japan suffered a high volume of breaches simply because its unpatched infrastructure yielded the highest return on investment” for hackers, he said.他说：“日本之所以遭遇大量网络入侵，纯粹是因为其基础设施中的漏洞没有得到修补，让黑客能够获得最高的投入回报。”It is unclear what threats the hackers had made, and how the companies have responded to any demands. The Japanese police said last week that the Russian ransomware group Qilin had been responsible for attacks on 53 Japanese companies over the past year and that a suspect had been extradited to Germany. It is unclear if Qilin was responsible for some of the recent cyber attacks.目前尚不清楚黑客提出了哪些威胁，以及遭到攻击的企业如何回应他们的要求。日本警方上周表示，俄罗斯勒索软件组织“麒麟”在过去一年中对53家日本企业发动了攻击，一名嫌疑人已被引渡至德国。目前尚不清楚“麒麟”是否参与了最近的部分网络攻击。How is the government responding?政府如何应对？The government has issued alerts with updated guidelines on handling personnel information, Mr. Furukawa said, including removing personal data that is no longer needed and requiring two-factor authentication.古川表示，政府已发布警报，并更新了处理人事信息的指南，包括删除不再需要的个人数据，并要求双重认证。The government was still investigating the causes of the attacks, including whether A.I. was used. “Progress in clarifying the details of these incidents has been slow,” he said.政府仍在调查攻击原因，包括是否使用了人工智能。“查明这些事件细节的进展缓慢，”他说。A new cyberdefense law took effect earlier in October that allows the national police and Japan’s military to monitor and even disable foreign servers and infrastructure to protect national security interests. The law also makes it mandatory for companies to report breaches.一项新的网络防御法规于10月初生效，它允许日本警察和军方监控甚至禁用境外服务器和相关基础设施，以维护国家安全利益。该法律还强制企业必须报告网络安全遭入侵事件。Professor Yoshioka, the systems security specialist, who advised the government as it developed the new law, called for international collaboration, as the infrastructure behind the attacks was unlikely to be confined to Japan.系统安全专家吉冈教授曾在新法制定过程中为政府提供建议。他呼吁开展国际合作，因为攻击背后的基础设施不太可能仅限于日本境内。Hans van der Heijden, a Melbourne-based digital forensics specialist at the global risks consultancy firm Control Risks, said that while Japan has made significant strides in its cybersecurity infrastructure, the process will take time and investment.全球风险咨询公司Control Risks驻墨尔本数字取证专家汉斯·范德海登说，虽然日本在网络安全基础设施方面取得了显著进展，但这一过程需要时间和投资。“Some organizations continue to face challenges in patching vulnerabilities, replacing outdated technology, and implementing modern security controls,” Mr. van der Heijden wrote in an email.范德海登在一封电子邮件中写道：“一些机构在修补安全漏洞、更换过时技术以及实施现代化安全控制措施方面，仍然面临挑战。”In the meantime, the cyberthreats will continue, he said.他说，与此同时，网络安全威胁仍将持续存在。赫海威(Javier C. Hernández)自东京对本文有报道贡献。Tiffany May是时报驻香港记者，报道香港和更广泛地区的政治、商业和文化议题。Kiuko Notoya是一名常驻东京的记者/研究员，报道日本新闻。翻译：纽约时报中文网点击查看本文英文版。