The leakage of personal information has become the main cause of Internet fraud

While the Internet has brought convenience to people's lives, the special nature of online has also made "scammers" like fish, combining offline tricks with technical means. It is not only confusing and concealing, but also the speed of fraud has evolved so quickly. Ordinary netizens are difficult to identify and prevent.

On the eve of the Spring Festival of the Year of the Goat, actor Yu Xiaofan was exposed for information disclosure and was deceived by 8 million yuan. Prior to this, many stars such as Tang Wei and Li Ruojun had encountered “scam doors”. Female celebrities frequently suffer from online fraud, further exacerbating concerns about cyber fraud. Data from the 360 ​​online payment service shows that in 2014, the country received a total of 23,000 internet frauds. Due to various reasons, the number of users who report after being cheated only accounts for less than one-tenth of the total number of cheated users. This means that at least 230,000 Internet fraud cases occur each year. The total amount of website fraud reported was 47.71 million yuan, and the per capita loss was 2,070 yuan. Compared with 2013, the number of cyber fraud reports increased by 3.56%, and per capita loss increased by 42.9%.

Information leakage leads to cyber fraud

360 Internet Security Center based on long-term analysis of phishing websites, fraudulent websites, Trojans, pseudo-base stations, spam messages and harassment phone interception data analysis of various Internet fraud and harassment found that the chief culprit of high network fraud mainly from personal information leakage .

According to the data, since 2011, a total of 11,126,700 users of information data have been leaked due to reasons such as dragging and crashing, and the leakage of a large amount of personal information has further encouraged the popularity of various types of online fraud. In 2014, 360 online fraud claims received from online shopping service number 230,357 had all kinds of online frauds related to the theft of personal information or accounts as many as 2,863, which was more than double the number from 1,395 in 2013.

The study found that there are mainly three paths to the leakage of personal information: one is the human factor, that is, information is illegally resold by employees of companies and organizations; the other is that computers are infected with malware such as Trojans that cause personal information leakage; third, attackers Using the website vulnerabilities, it invaded the database of saved information. Judging from the offensive and defensive practices of website security in 2014, the attacks and exploits of websites are developing in batch and scale.

Website security is directly related to a large number of personal information, trade secrets, property security and other data. After an attacker invades a website, one will tamper with the content of the website and implant a black word black chain. Second, implant a backdoor program to achieve the purpose of controlling a website or a website server. Third, fraudulently pursuing administrator privileges through other methods to control the website or Drag and drop.

Since the leaking of CSDN's secrets in 2011, the website has encountered incidents of drag and drop. Until 2014, the hitting library attack reached an unprecedented peak, and many well-known websites such as No Secret (formerly secret), public comment network, Sohu, Anzhi, Car House, Sogou, and Evernote were hit by a library attack. , resulting in a large number of user information leakage.

Fraudulent part-time work as a fraud area

The data from 360 shows that false and part-time has become the Internet fraud with the largest number of reported crimes and the largest reported amount for two consecutive years, and the number of false shopping reports still ranks second, but the total amount reported is less than refund fraud.

Refund frauds were "concealed" in 2014. Their main forms were: scammers pretending to be sellers, contacting customers who had just completed online shopping by telephone, chat tools, etc., and arguing that they had traded the goods they had just purchased. Abnormal, and in the "guidance" users deal with exceptions, trick users into phishing sites and payment operations, and ultimately defraud users of money.

The key to the success of refund fraud is that the fraudster not only knows the victim's phone number or chat account, but also generally can accurately say the user's purchased goods and purchase time, which makes it difficult for users who do not understand such fraud. It's hard to imagine that the people who contacted themselves were not real buyers. The reason why fraudsters can understand the user online shopping information, mainly because the user or seller's account was stolen.

According to the monitoring of the 360 ​​Internet Security Center, there have been a number of incidents in which large-scale website systems were invaded and user account passwords were leaked in batches in 2014. This was an important reason that led to widespread reimbursement of refund fraud in 2014.