Jiangsu police to the many hacker involved in the trafficking of personal information: there are two criminals have been adult-hacker, Jiangsu, personal information-IT information
Hundreds of millions of pieces of data covering every aspect of citizens ' personal information, the data traffic in "on-demand" ... ... In August this year, Wuxi, Jiangsu, police uncovered "Allison 5·19" data trafficking rings. As of the release date, Qiu Jiawei 7 persons for the crime of infringement of citizens ' personal information, such as prosecuting attorney by Jiangyin; children 5 hackers arrested for violations of citizens ' personal information, such as crime, illegal control of computer information system in investigation and prosecution stage and another 4 hackers in the arrest phase.
Victims become "middleman"
On May 19 this year, Wuxi city, Jiangsu Province, China's Ministry of public security to the Public Security Bureau issued a project lead: QQ, nicknamed "good" netizens on the Internet illegal trade of all kinds of civic information data. Police then set up "Allison 5·19" project, the investigation found that: "good" real name Qiu Jiawei, is the keeper of the warehouse of a company town, Jiangyin City, also a data vendor.
According to Qiu Jiawei account after the case, he is also a victim of personal information is divulged, "when my daughter was born last year, I received a phone call asking me if I needed training, often want to milk, I'd like to know is how do I know my information. "To this end, Qiu Jiawei began online, find someone special acquisition of citizens ' personal information. He felt that this was a part-time opportunity to Fortune later in QQ place "good" status, join your trade information, data, QQ Group.
At first, Qiu Jiawei within different groups share file download sold citizens ' personal information to offline, but often not much profit because of stale data. After a period of time, Qiu Jiawei touched the road his QQ "MT" join online groups, with "good", "okul", such as QQ join the downline group. Line group needs what type of information he bought data on line sold off the production line, to make the difference.
October 2015 to June 2016, Qiu Jiawei by hacking into Web sites, illegal access to social security, driving school, online shopping, and personnel data 99,000. Meanwhile, he maintained close contact with a group of hackers and data buyers, help hackers to contact buyers to sell information on the one hand, a total of 10 on-line purchase of citizens ' personal information more than more than 2.09 million; also takes orders from line on the other hand, required online orientation to obtain some personal information data, collated and after testing a total sale of citizens ' personal information to line 9 40yuwantiao profited by tens of thousands of Yuan.
"Technology inside" led industry chain
On June 13, Jiangyin City Public Security Bureau according to Qiu Jiawei conversations and transactions sent 11 arrest team to Hainan, Anhui, Guangdong, Hebei and other nature of arrests, caught the first suspect, 12.
Notable was suspect Zhang Yanan, perfume and health pants telemarketing work, its purchase of citizens ' personal data is all about perfumes and guard pant. After the first transaction, Zhang Yanan, data accuracy is high, then each 0.3 Yuan to 0.8 Yuan price continue to buy 6,867 Qiu Jiawei data relating to citizens ' personal information.
Follow this 6,867 information, with Fei Yu as "inner demons" of industry chain gradually surfaced. Yu Fei is a brand-name computer science graduates of the University, has worked at 4 well-known information technology company, arrested former a Beijing technology company information Director of operations, more than 30,000 yuan a month. Yu Fei before work, and all kinds of information data, working in his company's servers and stored on the PC a lot of citizens shopping, tourism and consumption data. In February this year, joining some data in flying precision marketing group, data center group, found in a lot of people to buy data. Driven by interests, to fly several times for belonging to unauthorized copies of data within the company to his personal computer.
From March to June this year, to fly the data multiple times in the more than more than 140,000 sold to Zhang Ling, Zhang Ling to sell more than 110,000 articles to Gao 旻chen, Gao 旻chen and sell more than 65,000 articles to has inscribed, has inscribed sold more than 1200 articles to Guo Shibiao, Guo Shibiao sold 1051 to Qiu Jiawei.
Since then, police in Qiu Jiawei, 7 people were destroyed in the mobile hard disk data 1000duowantiao is not trafficked.
From the virtuoso to accept "personal customization"
Also in Qiu Jiawei mobile hard drive, police found a large amount of accurate data, the data is fresh data, but significantly better than the data obtaining difficult, such as somewhere for ages 60 to 80 years of age social security data, a college class 2015 girls data. Originally, these personal information to some buyers of "private to measure".
Accordingly, the launching of a new round of arrests by the police. On October 20, the second batch of suspects a total of 4 hacker case. At this point, "5.19 Allison" project 16 caught suspects, in which hackers 9.
9 hacker is the most representative of the child and Xu (crime are minors), in which Xu for college students, children under 18 years of age, had worked at the National University Institute for Internet behavior, its network is "student hackers" in the highest level. According to two who, at first, they used a hack attack Web sites just to show off, data vendors after the repeated urging of the "action of the heart." October 2015 to June 2016 under the "middleman" needs, they are hacking Web sites, gets companies, driving schools, car customers, online shopping, and personal information such as neighborhood more than more than 610,000, 144 illegal control of computer information system, repeatedly sold the information to more than 10 people, Qiu Jiawei, illegal gain thousands of Yuan.
After data inspection and information work, a project involved were combing hacking, personal information exchange QQ Group of hundreds of citizens, members of the group reached more than 50,000 people. Total 9 hackers attack websites more than more than 4,000 illegal acquisition of 110 million involving citizens ' personal information.
江苏警方抓获多名黑客参与贩卖个人信息：有两罪犯尚未成年 - 黑客,江苏,个人信息 - IT资讯
上亿条数据涵盖公民方方面面的个人信息，数据贩卖“按需定制”……今年8月，江苏无锡警方破获“5·19佳佳拍”数据贩卖团伙。截至发稿之日，邱佳伟等7人因侵犯公民个人信息罪被江阴市检察院提起公诉；童某等5名黑客因涉嫌侵犯公民个人信息罪、非法控制计算机信息系统罪处于审查起诉阶段，另有4名黑客处于审查逮捕阶段。
受害者变成“中间商”
今年5月19日，中国公安部向江苏省无锡市公安局下发专案线索：QQ昵称为“佳佳拍”的网民在互联网上非法买卖各类涉及公民信息的数据。警方随即成立“5·19佳佳拍”专案组，经侦查发现：“佳佳拍”真名叫邱佳伟，是江阴市某公司仓库保管员，也是一名数据贩卖商。
据邱佳伟到案后交代，他也是个人信息被泄露的受害者，“去年我女儿刚生下来的时候，我就经常接到电话问我要不要培训、要不要奶粉，我就想知道对方是如何知道我的信息的。”为此，邱佳伟开始上网查询，发现有人专门收购公民个人信息。他觉得这是一个做兼职发财的机会，随后以QQ名“佳佳拍”的身份，加入各种买卖信息、数据的QQ群。
一开始，邱佳伟在不同的群共享文件内下载一些公民个人信息出售给下线，但这样的方式往往因为数据陈旧而获利不多。一段时间后，邱佳伟摸出了门道，他以QQ名“MT”加入上线群，用“佳佳拍”“鬼来了”等QQ号加入下线群。下线群需要什么类型的公民信息，他就到上线那里买来相关数据卖给下线，从中赚取差价。
2015年10月至2016年6月间，邱佳伟通过入侵网站方式，非法获取了社保、驾校、网购、人事等数据9.9万条。同时，他与一批黑客和数据买家保持密切联系，一方面帮黑客联系买家出售信息数据，共向10名上线购买公民个人信息209万余条；另一方面也从下线那里接订单，要求上线定向获取一些公民个人信息数据，经过整理和测试后共向9名下线出售公民个人信息40余万条，从中获利数万元。
“技术内鬼”牵出产业链
6月13日，江阴市公安局根据邱佳伟的聊天内容和交易记录，派出11个抓捕组赴海南、安徽、广东、河北等地开展抓捕行动，共抓获首批犯罪嫌疑人12名。
引人注意的是嫌疑人张亚男，因从事香水和卫裤的电话推销工作，其购买的公民个人信息数据都是关于香水和卫裤的。在首次交易后，张亚男感觉数据准确性较高，随后以每条0.3元到0.8元的价格陆续向邱佳伟购买了6867条涉及公民个人信息的数据。
顺着这6867条信息，以于飞为“内鬼”的产业链渐渐浮出水面。于飞是某名牌大学计算机硕士毕业生，先后就职于4家知名信息科技公司，被逮捕前任北京某科技公司信息运营总监，月薪3万元以上。于飞之前的工作就是和各种信息数据打交道，在他公司服务器和工作电脑里储存了大量的公民购物、旅游、消费等数据。今年2月，于飞加入了一些数据精准营销群、大数据中心群，发现群里很多人都向他购买数据。在利益的驱动下，于飞先后多次将原本属于公司内部的数据擅自拷贝到他私人电脑里。
今年3月至6月，于飞多次将上述数据中的14万余条出售给张羚，张羚将其中11万余条出售给高旻琛，高旻琛又将其中6.5万余条出售给陈文杰，陈文杰将1200余条出售给郭士彪，郭士彪将1051条出售给邱佳伟。
此后，警方在邱佳伟等7人的移动硬盘中销毁了未被贩卖的数据1000多万条。
从炫技到接受“私人定制”
同样是在邱佳伟的移动硬盘里，警方发现了大量精准数据，这些数据都是新鲜数据，而且明显比之前的数据获取难度高，如年龄为60岁至80岁的某地社保数据、某大学2015级女生数据等。原来，这些个人信息是为某些买家“私人定制”的。
据此，警方展开新一轮抓捕行动。10月20日，第二批犯罪嫌疑人共4名黑客到案。至此，“5.19佳佳拍”专案组共抓获嫌疑人16名，其中黑客9名。
9名黑客中最具代表性的是童某和徐某（犯罪时均为未成年人），其中徐某为在校大学生，童某未满18周岁时已就职于国内顶尖大学网络行为研究所，其网络技术是几名“学生黑客”中水平最高的。据二人交代，起初他们利用黑客技术攻击网站只是为了炫耀，后在数据贩卖商的一再怂恿下“动了心”。2015年10月至2016年6月间，根据“中间商”的定制要求，他们非法入侵网站，获取了企业、驾校、汽车客户、网购、居委会等个人信息61万余条，非法控制计算机信息系统144个，多次将信息出售给邱佳伟在内的10余人，非法获利数千元。
经过数据勘验和信息去重工作，专案组共梳理出涉及黑客、公民个人信息交易的QQ群上百个，群成员达5万多人。9名黑客共计攻击网站4000余家，非法获取涉及公民个人信息1.1亿条。