China Telecom fraud occur frequently, regulatory loopholes "accomplice"-Telecom fraud, real name-IT information
The morning of September 1, Zhengzhou city, Henan province, Zhengzhou University new campus football field, from Zhengzhou Public Security Bureau anti-fraud false information centre, "Zheng zombie squad" over more than 6,000 enrolled students, based on a real case for the first class of freshmen on the safety of school, in order to allow new polished eyes, recognizing various scam tricks criminals, protect their personal and property safety.
? Online without a real name and ID, sale of phone cards, casual chat screenshot. ? Youth online reporter of China Youth daily POON Lam/photo
Recently, constantly exposed students encounter Telecom fraud case triggered widespread social concern. ? Youth online reporter of China Youth daily after a survey found that a large number of student information on the Internet has been priced to sell, phone card, bank card with the supposed real name, no registration can easily buy.
High school student 100/1000
? Youth online reporter of China Youth daily social networking platforms to retrieve the related keywords, find hundreds of "information" related to the QQ Group, many of which name of the group directly for "student data transaction" "Bank data deal". Journalists joined some of the QQ Group found that members of these groups there are buyers and sellers, the number in the dozens of hundreds of people, from time to time in the publication of "selling the latest student data information, private chat" "buy XX students of information" message.
Reporter published an article in the Group buy student information messaging, soon to have people take the initiative to contact reporters, asked what phase, which students in the area of information. Henan high school reporter asked if sellers information, sell in screenshot to show reporters his database. Reporters saw in the screenshot, there are 18 Excel files, except for one named "yongcheng" (under the jurisdiction of the county-level city, Shangqiu city, Henan province-journalists), the remaining 17 named all around the city, Henan province's name. According to him, this bread has a lot of information is the area high school students, offered 100 per 1000.
Another seller contacted reporters. He said he had failed in the Henan region over more than 30,000 health information. Reporters raised concern about the authenticity, the caller said, "I have done this for years." After negotiations, and journalists can verify immediately for free buy in bulk case, each other finally gives complete information capture of two tickets for a total of 25 students. Screenshots on the student's name, gender, school, home address, contacts, parents ' names and contact information were readily available, detailed to an alarming degree. The seller of this quotation is an ordinary high school student information per 100 to 1000, the "sliding" students and art student information per 200 to 1000. The seller also told reporters that the offer "data are up to date."
Reporters trying to call the shots in a row in more than one student calls, proving to the screenshot gives information on all of the real, while students and parents are shocked after learning of the disclosure of their information, it is not clear when their information is being compromised.
Information provided by these sellers are from it?
It is understood that the current hackers have become key parts of the underground trading of personal information industry chain. Beijing Zhong an owner, famous in the world of "white hat" and "301" Yang Wei for the candidates ' personal information security had done specialized research. In an interview, he said: "this information is very valuable, and people buy it was selling. Now that people are willing to spend money and raw materials, that naturally there will be hackers to attack these targets. Hackers illegally obtained the information, get data, then people will take over. There is also the presence of large speculative dealers, in the middle of making the difference. ”
A network security company Internet security report issued by 2015 China, currently the site of information disclosure vulnerabilities can lead to a total of about 1.15 billion and disclosure of personal information, accounts for business/personal Web sites may disclose information (2.63 billion) of the 43.7%. Among them, the IT/Internet Web site may disclose personal information up, 523 million, followed by 197 million medical and health Web sites, 240 million telecom operators, financial-banking site 110 million, car traffic to website 54.18 million 24.62 million, education and training website.
Insiders say many cipher designs are too simple, countless security vulnerabilities, it is easy to become the target of hacker attacks.
In addition to outside hackers, some education and training in-house and even offer to traffic in candidate information. On August 24, the training agency staff with the Beijing Haidian District people's Court sentenced reselling student and parent information case. Work in training schools, educational company of Yang, Xu and other 6 people, illegal access, purchase 200yuwantiao students and parents information, in addition to the fixed mass advertising to parents, net, network platforms such as 58 city for sale. Yang, Xu, 6 people convicted of crime of illegal access to personal information, courts sentenced to 1 year and 3 months, six months and suspended for 1 year in different sentences.
Paragraph 170, the 171th became non-specifically in reference to real cell phone number
The victim's details, fraudsters can be committed against a victim "precision fraud." In a number of telecommunications fraud, liar's phone number is used by 170, paragraph 171th. Liar, why these two paragraphs number?
It is understood that the 171th and 170th paragraphs are virtual operating segments. Virtual operators from China Mobile, China Unicom, Telecom contracting part three basic operators access to communications networks, and through their own billing systems, customer service, marketing, and management systems sold to consumers. However, strict enough control of virtual operators on agency channel, States for the binding of the virtual operator is relatively low, therefore, paragraph 170, the 171th became non-real name phone number hit, was exploited by fraudsters.
Reporter indicated in Taobao to contact a service area for "170, 171 telephone card" merchant. After learning of the reporter to buy non-real name calling card customer who introduces a name for "far" Unicom mobile phone card, and said that this card does not need to register, each at $ 33.
Reporters asked how payment, the other gives a sales cut cards store link and, in particular, reminded reporters, to be adjusted to the number "21". Reporters open links found, this shop for cut cards, priced at 1 Yuan per piece, when journalists put the quantities adjusted to 21 o'clock, knot page automatically becomes a 33. Reporters found that normal price cut cards on the market are more than 5, the reporter asked: "if they really want 1 Yuan for cut cards can you sell it? "Customer service answered:" not for sale. ”
In addition to the non-real name can be found in e-commerce platform phone cards, the reporter is still Baidu search queries to a lot of selling non-real name phone cards and the QQ number. Press Add one friend, found in this space, many of the day-to-day operations of the show, many pictures taken of FCL shipments of phone cards.
According to each other, he sells this phone card no monthly, no bots, no minimum consumption, do not need to register. When asked: "was down because it is not registered? "The other side is sure to answer" no "because" companies have been registered. "
QQ Group in sale information before journalists also found that not only buy and sell student information, was also published news of the sale of bank cards, and written in the message "money laundering, anonymous cash transfers without leaving any traces." Sale price given is "SIM card + card + photocopy + reserved depositary receipts 390 Yuan", if you need NET silver shield 100 Yuan more.
Sell cards that use this bank card transactions, others are "absolutely not found". Sold card is also says it will offer the big bank account, "how much do you need I can provide."
Sell cards that, he was just a middleman, the card was purchased from others, earned is the difference. But he also seems to be especially careful in talking with reporters, he said, "these days, was frightened by the television coverage."
Police said many Telecom scams are hard to crack, one of the reasons is that crooks use bank cards are not my accounts, but through online purchase. Even if police find account, caught only sells card, not a liar himself.
Telecom fraud eradication requires joint efforts
Users commonly questioned why not deception account freeze cheat quickly after this, 17 years of age basic-level police station, Zhang kai, told reporters: freezing procedure requires police to the victim be interviewed and evidence collection was cheating, and reported in the filing is approved, further reporting queries and freezing procedures. This process takes at least 3 hours, and all fraud victims transfer money transfer only takes a few minutes. While waiting for the police to freeze bank, money had been transferred away. It is understood that the current network servers, Telecom fraud suspect location and swindle money often are outside occasionally, money is not transferred outside the situation, deception of money within half an hour was quickly broken, multiple transfers, withdrawals.
As the Telecom fraud is "contactless" crimes, involving more than one field, therefore, combating and preventing telecommunications fraud, require multiple departments working together.
This year March 4, silver prison will released on banking combat governance telecommunications network new illegal crime about work matters of notification, on banking combat governance telecommunications network new illegal crime work for has full deployment: requirements banking financial institutions strictly real name management, full using ID networking verification, technology means, seriously audit handle people ID pieces; while strictly limit open card number, per person each line open card in principle not over 4 Zhang. In the notice, the CBRC required banking institutions a comprehensive improve business processes, enhance the level of internal control, strengthen bank card security management, strengthen self-discipline, strict implementation of social responsibility.
On April 9 this year, the Ministry was responding to media, real-name system has also been for lax implementation problems, emergency interviewed 3 virtual operator, shall be ordered to immediately rectify and suspending of the 3 virtual operators nuclear equipped with new numbering resources, in front of the rectification is not open.
In addition to government departments, Internet search engine providers are also duty-bound.
On August 22, lives in Henan shenqiu Don snow Lotus to return train ticket booking online, look up a ticket on the phone from Baidu, turned out to be a step by step cheat 60,000 yuan in the past. That is her son to see a doctor for severe cerebral palsy instead of going to borrow a lifeline.
After the Don Medusa are deceptions, Baidu said in a statement: "today, some unscrupulous elements search results automatically crawl mass characteristics of third-party Web site information, through the machine clicks and other illicit acts, containing false information in their search results page rank, to enhance Internet users click on the probability of taking the purpose of fraud. "In this regard, Baidu will" will continue to enhance the anti cheat system and enhance manual troubleshooting interventions to combat such acts, prevent Internet users believe that false information. "
Experts suggest that to destroy Telecom fraud, besides through government regulation and corporate self-discipline and social supervision measures, the relevant departments of the State and the media to enhance the safety awareness of the public popularity. Meanwhile, the public has no need to continue to improve their own qualities and decency, not to open strange links in text messaging, micro-letter, do not trust strangers involved in transfer request call.
中国电信诈骗频频发生，监管漏洞成“帮凶” - 电信诈骗,实名制 - IT资讯
9月1日上午，河南省郑州市郑州大学新校区足球场，来自郑州市公安局反虚假信息诈骗中心的“郑警蜀黍”给6000多名入校新生，以一个个真实的案例为新生们上了开学安全第一课，为的是让新生擦亮双眼，认清不法分子的种种骗局伎俩，保护好自己的人身财产安全。
▲网上不用实名和身份证，买卖手机卡号很随意的聊天截图。中国青年报·中青在线记者潘志贤/摄
近日，不断曝出的学生遭遇电信诈骗的案件引发社会广泛关注。中国青年报·中青在线记者经过调查发现，有大量学生信息在网络上被标价售卖，而本该实名办理的手机卡、银行卡，不登记也能轻松买到。
高中生信息100元1000条
中国青年报·中青在线记者在社交平台上检索相关关键词，找到数百个与“信息买卖”相关的QQ群，其中不少群的名称直接为“学生数据交易”“银行数据信息交易”。记者加入了其中一些QQ群后发现，这些群内的成员有买家也有卖家，人数在几十至数百人不等，群中不时有人发布“出售最新学生数据信息，可私聊”“求购××地学生信息”等消息。
记者在群中发布了一条求购学生信息的消息，不一会儿就有多人主动联系记者，问需要哪个阶段、哪个地区的学生信息。记者问出售者有没有河南高中生的信息，出售者以截图的方式向记者展示了他的数据库。在截图上记者看到，有18个Excel文件，除了一个命名为“永城”（河南省商丘市下辖县级市——记者注）外，其余17个全部命名为河南省各地市的名字。据他介绍，这里面包含的就是各个地区高中生的信息，开价100元1000条。
另一名出售者也主动联系记者。他说自己有河南地区3万多名落榜生信息。记者提出对真实性有疑虑，对方说“我做这一行都好几年了”。经过交涉，在记者提出如果能免费验证就立即大量购买的情况下，对方终于给出了两张共25个学生的完整信息截图。截图上学生的姓名、性别、学校、家庭住址、联系方式、父母姓名及联系方式一应俱全，详细程度令人吃惊。这名出售者的报价是普通高中生信息每100元1000条，“滑档”学生和艺术生信息每200元1000条。这名出售者还向记者保证，所提供的“数据都是最新的”。
记者尝试连续拨打截图中的多个学生电话，求证到截图上给出的信息全部真实，而学生及学生家长在得知自己的信息泄露后均非常震惊，不清楚自己的信息是何时被泄漏的。
那么这些出售者所提供的信息是从哪来的呢？
据了解，当前黑客已经成为个人信息地下交易产业链的关键部分。北京众安天下负责人、知名“白帽子”“301”杨蔚对于考生个人信息安全曾做过专门的研究。他在接受媒体采访时说：“这些信息非常有价值，有人买就有人卖。既然下游有人愿意花钱，那自然就会有黑客去攻击这些目标。黑客非法获取这些信息，拿到数据以后，就会有人接手。这里面还有大量二道贩子的存在，在中间赚差价。”
某网络安全公司发布的《2015年中国互联网安全报告》显示，目前国内网站存在的泄露信息漏洞共可导致约11.5亿条个人信息泄露，占到了企业/个人网站可能泄露信息总量（26.3亿条）的43.7%。其中，IT/互联网网站可能泄露的个人信息最多，为5.23亿条，接下来依次是医疗卫生网站2.4亿条、电信运营商1.97亿条、金融理财网站1.1亿条、汽车交通网站5418万条、教育培训网站2462万条。
有业内人士表示，很多网站密码设计过于简单，安全漏洞不计其数，很容易成为黑客攻击的对象。
除了黑客之外，一些教育培训机构内部人员还会主动贩卖考生信息。8月24日，北京市海淀区人民法院宣判了一起培训机构员工倒卖学生及家长信息的案件。在培训学校、教育公司工作的杨某、徐某等6人，非法获取、购买200余万条学生及家长信息，除了定点向家长群发广告，还在赶集网、58同城等网络平台出售。杨某、徐某等6人因犯非法获取公民个人信息罪，被法院判处1年3个月、半年及缓刑1年等不同的刑罚。
170、171号段成了非实名手机号的重灾区
有了受害人的详细信息，诈骗分子就能够针对受害人实施“精准诈骗”。在众多电信诈骗案中，骗子所使用的电话号码多是170、171号段。骗子为何青睐这两个号段的电话号码呢？
据了解，171号段与170号段都是虚拟运营号段。虚拟运营商从移动、联通、电信三大基础运营商那里承包一部分通讯网络的使用权，然后通过自己的计费系统、客服号、营销和管理体系卖给消费者。但是，虚拟运营商对代理渠道的把控不够严格，国家对虚拟运营商的约束力也相对较低，所以，170、171号段成了非实名手机号的重灾区，被诈骗分子利用做案。
记者在淘宝网上联系了一家标明服务范围为“170、171电话卡充值”的商家。得知记者要购买非实名制的电话卡后，客服人员介绍了一种名为“远特卡”的联通手机卡，并且明确说，这种电话卡不需要实名登记，每张售价33元。
记者问怎么付款，对方给出了一个销售剪卡器的店铺链接，并特别提醒记者，要把商品数量调整为“21件”。记者点开链接发现，这个店铺的剪卡器，标价每件1元，当记者把购买数量调整为21时，结款页面自动变成了33元。记者调查发现，市面上剪卡器的正常单价都在5元以上，记者问：“如果真的要1元买剪卡器你卖吗？”客服人员回答：“不卖。”
除了在电商平台能找到非实名制电话卡外，记者还在百度搜索上查询到了不少售卖非实名制手机卡的QQ号。记者添加其中一人为好友，发现在这个账号空间里，有许多日常经营情况的展示，不少图片拍摄的是整箱发货的电话卡。
据对方介绍，他销售的这种电话卡无月租、无漫游、无最低消费，不需要进行实名登记。记者询问：“会不会因为没有登记而被停机？”对方很肯定地回答“不会”，原因是“公司已经登记过了”。
在前述售卖信息的QQ群里记者还发现，不仅有人求购、出售学生信息，还有人发布售卖银行卡的消息，并在消息中写着“洗黑钱、匿名收款转账不留痕迹”。售卖人给出的价格是“银行卡+身份证复印件+预留手机卡+开户回执390元”，如果需要网银盾再多加100元。
卖卡人说使用这种银行卡交易，别人是“绝对找不到的”。卖卡人还说自己能提供各大银行的账户，“你需要多少我都能提供”。
卖卡人说，自己只是一个中间人，银行卡是从别人那里购买的，自己赚取的都是差价。不过他在与记者的交谈中也显得格外小心，他说“这几天被电视报道吓坏了”。
有民警表示，很多电信诈骗案之所以难破，其中一个原因就是骗子使用的银行卡并非本人开户，而是通过网上购买的。就算公安机关找到了开户人，抓到的也只是卖卡人，不是骗子本人。
消灭电信诈骗需要共同努力
针对网友普遍质疑为什么不能在受害人被骗后迅速冻结骗子的账户这个问题，有17年警龄的基层派出所民警张凯告诉记者：冻结手续是需要民警给受害人做笔录，收集被骗的证据，并在呈报的立案被批准后，再呈报查询及冻结手续。这个过程至少需要3个小时，而骗子将受害人转账的钱全部转走往往只需要几分钟。等民警到达开户行进行冻结时，钱早就被转走了。据了解，目前电信诈骗的网络服务器、犯罪嫌疑人所在地和被诈骗的赃款往往都在境外，偶尔有赃款不转往境外的情况，受害人被骗的钱也会在半小时内被迅速分解、多次转账、各地提现。
由于电信诈骗属于“非接触式”犯罪，涉及多个领域，因此要打击和防范电信诈骗，需要多个部门的共同努力。
今年3月4日，银监会发布《关于银行业打击治理电信网络新型违法犯罪有关工作事项的通知》，对银行业打击治理电信网络新型违法犯罪工作进行了全面部署：要求银行业金融机构严格实名制管理，充分利用身份证联网核查等技术手段，认真审核办理人身份证件；同时严格限制开卡数量，每人每行开卡原则上不超过4张。在通知中，银监会还要求银行业金融机构全面梳理完善业务流程，提升内控水平，切实加强银行卡安全管理，不断强化行业自律，严格落实社会责任。
今年4月9日，工信部曾经回应媒体称，已针对电话实名制落实不严问题，紧急约谈了3家虚拟运营商，责令企业立即整改，并暂停对此3家虚拟运营商核配新的码号资源，在整改到位前不予开放。
除了政府部门外，网络搜索引擎服务商也责无旁贷。
8月22日，家住河南沈丘的唐雪莲为了把网上预订的火车票退掉，从百度上查到一个退票电话，打过去竟然被一步步骗走6万元。那是她为给重症脑瘫的儿子看病而四处筹借的救命钱。
在唐雪莲被骗案发生后，百度发表声明称：“当前，一些不法分子利用搜索结果自动抓取海量第三方网站信息的特性，通过机器点击等非法行为，让含虚假信息的链接在搜索结果页排名靠前，来提升网民点击的概率，借机施行诈骗。”对此，百度将“将不断强化反作弊系统，并加强人工排查干预来打击此类行为，防止网民误信不实信息”。
有专家建议，要消灭电信诈骗，除了需要通过政府监管、企业自律、社会监督等手段外，国家有关部门以及媒体也要加强对公众安全防范意识的普及。同时，公众也要不断提升自身素质和辨别能力，不要随意打开短信、微信中的陌生网址链接，更不要轻信陌生人涉及转账要求的电话。