Lei feng's network: the writer Wu Zhao, founder of white hat meeting.
Has a jokes is such of: "since has phone yilai, SMS has been didn't by deleting, last night free with nothing obtained not completely statistics: cumulative winning 137 times, funds amounted to 72.6 million Yuan, another has various iPhone phone 68 Department, notebook computer 36 Taiwan, car 27 car, in the had mango TV 2, award 56 times, run's brothers up 42 times of more, was University admitted 15 times, son was trafficking 23 times, was court summoned 31 times, bank card has exception 31 times, Son of female votes Chang arrested 103 times in the field. Please tell me, is legendary in my life!. "
Behind the joke is a deep sense of frustration, we each received a lot of scam text messages and phone calls, the experts told you the solution is to be more vigilant, use security software to tip and interception. This stop does it catch approach leads to wire fraud rampant, stopped a group of ten, stopped 10 out of 100 batch, those criminals have not been effective against, or that combat is not enough to shake the blood into the hands of sinners. Legislation and law enforcement sometimes lagging, both in terms of child trafficking, or telecommunications crime and cybercrime, this lag is usually through some typical events that trigger to stimulate and advance. Unfortunately, these trigger events are a tragedy.
Yesterday morning to see the "suffering Telecom fraud death of female college students," the news, a poor college student Xu Yuyu in linyi city received shark grants scam telephone calls, was tricked 9900 Yuan for tuition, suffered a great deal of stimulation, died due to cardiac arrest. I am concerned that he is being discussed, said Xu Yuyu poor psychological skills, others say this is a typical Chinese-style education leading to the tragedy, of course, most people still call the man expressed strong condemnation.
Because I work in information security, so I try to look at this issue from another angle.
| First of all, Xu Yuyu identity the way out?
How do fraudsters know her name, her exam information, and grants her situation? This is typical of information disclosure, in order to commit fraud, criminals will use real information to targeted fishing. I received the forged work send text messages, and can say my name and my child's name; I also heard about car insurance, sale room message, know what my name is, what. Because I only come when you give children the school ever had to fill out when buying a House, a car, only fill in, so almost certainly is a link is compromised.
Disclosing these data are the source of crime, with data entity responsibility cannot be passed.
| Secondly, how the data will be used?
When this data is out later, criminals will drill some loopholes in telecommunications, such as by way of pseudo-base station forged messages, a higher level of technical vulnerabilities will make use of some operators forged sending SMS or voice.
In this incident, criminals use virtual network operator 17x scam calls. Virtual operators was challenged from the outset, the biggest problem is how to do the monitoring. I might as well go belly black speculated that the number 171 registered false identities. We watched gangster films, often see an underworld gang members to street-side kiosks and buy a card, threw a cell phone scene after use. Operators at that time not to be identification, money can buy, then gradually fall to need to bind the true identity. This adds another topic, ordinary boss last name really is true, they would not have wanted to go to crime and criminals is one with a purpose from the beginning, so we often see traced the registration information is false. So here, I think the pipeline operator's responsibility cannot be passed, the criminal audacity to mess things up on your site, you don't mind is dereliction of duty.
| Consequences of fraud
Finally, this last call people who commit fraud, these broke people poor spiritual criminals and assumed direct responsibility. They will consider various fraud scenarios, such as carrier points expire, such as Lottery information, even fake Wang Baoqiang divorce fraud hot spots. Use of the general public, "greedy", "timid", "gossip" weaknesses, such as wantonly torturing people.
In the years I worked in information security, I have seen too many bad, too much frustration and sadness. I can quickly identify fraud, and some even I want to think about for a long time.
For example, one time I drove, got a phone call saying "you've offended someone, people spend money on your legs" or something, my first reaction was what the black middle class and I (360 received bullets it is no secret that year), a few minutes before I got to know that this is a fraud.
I also received first forged messages when I really believe my son just enrolled, timing a coincidence, don't have time to make you wonder if downloaded APK when I looked at it, may I also got in.
From this point of view, the fraud rate was really high.
Whether it be selling data, operators, even eventually swindling people, they don't think what they are doing terrible things –
"I just sold a copy of the data, I do not do things to hurt people for money"
"We are just a conduit, the above users do what we can't control"
"Nobody sells data no one has given us the decoy technique, nothing we can do, lie to this money is not as much event, you see I have a family to feed."
How sad, then finally Xu Yuyu events have taken place, she's nothing but a mass casualty, a typical, and how much we do not know.
If the people to rely on private security companies to protect, I would not be to thank these security companies, but rather to ask what caused this situation today? Our solutions and recommendations was the cart? I see more and more mobile phone security software to identify false base station functions added to detect fraud SMS functionality, add malicious links functionality, but at the same time I see them more and more malicious, that our phones are kept down. Moschino Galaxy S4 Case
We want to solve is not the last victim of the moment, but to find the source of the crime. Like terrorists, hit, hit, hit. Moschino Galaxy Case
Well, the title is a joke, it's true: just got a call from an unknown number, I "Hello! How are you doing! "Fraudsters" Hello! I'm your son, the kidnappers now in my hand, "both awkward for a few seconds, and then the other side hung up the phone.
Lei feng's network (search for "Lei feng's network" public attention): please contact us for authorization and keep the source and author, no deletion of content.
