A mobile phone user gets stack of short message test and verify one after another.
Black the QQ space that produces equipment to sell the home.
The Motolora C118 mobile phone with the good configuration that hair of a safe group public figure gives new capital newspaper reporter.
Secondhand have on platform sell the home to sell explore of short message smell collects a system.
Black produce through " explore of short message smell " the information that hijacks you, get mobile phone bugle call then, pay Zhang mark, implementation pilfer is brushed; Superintend already increased blow processing
"Feel privacy was divulged, very fear. " a day of not long ago afternoon, the Xiaocheng of institute of technology of profession of project of Shijiazhuang science and technology receives a lot of short message test and verify suddenly around the school to pile up. What Xiaocheng does not know is, the backside of this her special experience, extremely likely under cover illegallies or forcibly occupy long already black industry chain.
Many safe group public figure signs up for a reporter to express to new capital, xiaocheng's experience likelihood and be called one kind " GSM is hijacked + explore of short message smell " the technology is concerned. Actually, this is not an exemple. The Ceng Fasheng before this crosses before dawn to receive about a hundred test and verify to pile up, the result discovers the case that is brushed by pilfer.
New capital signs up for a reporter to investigate discovery, this black yield introductory doorsill is extremely low, what need code to all be a source. Need to be less than 30 yuan to buy mobile phone of C118 of a Motolora in the expenditure on the net only, black produce practitioner can pry arrives the short message content inside user mobile phone. Here setting falls, pilfer brushs bank card to become a possibility. More terrible is, explore of short message smell is the iceberg in empire of giant black estate only one horn. Pass mobile phone mark, the member that course of study mies wife still can use a room of the method know user such as company project library, address to wait for a lot of and sensitive information, can outline user draw a portrait easily thereby.
Investigate further through the reporter, the natural blemish that is 2G network agreement actually provided guilty breeding ground for its.
"Standard empty a general term for young women " 30 seconds receive 29 test and verify to pile up a short message
Often answer recall not long ago one day to leave the lot of midday, xiaocheng always is brows is knitted closely. "Feel privacy was divulged, very fear. Very fear..
That day, she what planning to go shopping just walks out of a school gate to do not have much further, all along quiet mobile phone hints suddenly sound is ceaseless, the short message of code of test and verify that comes from each APP is following one by one.
Xiaocheng is " standard empty a general term for young women " . Not long ago, pass the contend with the competitor 6 times, she shows itself in southern aerial interview eventually, awaiting groomed arrival. "Like seeing chump resembles when short message test and verify piles up Na Hang, very fear to be able to be opposite future is influential. " be borrowed besides the net and outside a few passwords that pay platform, two come from code of southern aerial test and verify to make Xiaocheng afraid all the more. To her character, all including " southern aviation " the information of these 4 words is OK easy to do touch her future.
"Had never come up against such thing. " to avoid the sound of short message clew of these arise suddenly, xiaocheng is in after was stupefied to be less than two seconds, move the mobile phone for flight mode. "Because I nodded to look, there is significant time at the back of code of every test and verify, instinctively so did. instinctively so did..
After the event, according to statistic, xiaocheng is in the time that is less than 30 seconds, receive 29 test and verify to pile up a short message in all.
What Xiaocheng does not know is, the backside of this her special experience, extremely possible under cover illegallies or forcibly occupy long already black industry chain. Have similar lot, also be not have her only a person. Nevertheless, someone else is not every are lucky like Xiaocheng.
"Carry equipment of sound of smell of a kind of short message, explore of OK and direct smell uses an all mobile phone short messages to telecommunication. " intent " to disembark " Laolv (alias) the introduction. "To disembark " it is black the cant in producing practitioner, for avoid risk, a few black produce after practitioner can is engaged in period of time " golden basin washs his hands " . He expresses, "Black produce practitioner to technical mobile phone signal collects equipment, use the mobile phone name that gathers, can wait in the net that order check execute seek the operation such as a password, implementation pilfer is brushed. But, this kind of equipment can atttack the mobile phone below 2G network condition only. Cooperate to fall frequency equipment, also can let compulsively enclothe position of network of the mobile phone inside limits to turn into 2G, come true thereby fall frequency attack. Come true thereby fall frequency attack..
Awake money was done not have, much ground produces pilfer of explore of short message smell to brush
As similar as Xiaocheng, last year on July 30, rare discovery of beautiful Nian Dafen of @- of small gain netizen, her mobile phone receives before dawn code of many 100 test and verify, include to pay treasure, Beijing east, bank APP. According to introducing, the capital that somebody uses her east account, pay treasure to wait beforehand to book a room, to cheer card to charge a cost, pilfer of add up to was brushed 10 thousand multivariate. At that time, many personage inside course of study suspects and alluded the name is " GSM is hijacked + explore of short message smell " technology.
Pressing with a finger is dialed return last year November, police of Wuhan city Han Yang district receives odd case 4 days 5 cases continuously. After the victim gets up, discover the mobile phone is received a large number of test and verify are piled up and buckle paragraph short message, the money in bank card was done not have. Among them, the victim with maximum loss is between one night, inside card 19 thousand yuan are transferred 17 times by person cent. On March 7, 2019 morning, policeman of group of detect of punishment of substation of public security of Han Yang area will commit a crime suspect Zhao some controls such-and-such, Shu Mou, use since Hubei head " explore of short message smell " new-style bilk case of the technology is accused broken. According to the report, from last year since September, two crime suspect is carried out commit the crime more than cases 30, gain profit in all more than yuan 20.
On March 27, open a court session of court of people of division of Nanchang city west lake tried Jiangxi province first cases to use equipment of sound of short message smell to carry out a network to steal consumptive case, catenary of this black industry also rises to surface.
According to finding out, 3 people pass Hu Mou of the accused person, Li Mou, He Mou after QQ, small letter is known, cooperate with division of labour, carry out theft jointly. Hu Mou is " makings advocate " , use equipment of sound of short message smell to get circumference the mobile phone date that can commit the crime inside rice and 500 machine advocate full name, this information transmit reachs Li Mou of the line on its after; Li Mou looks for other to inquire machine of number of this mobile phone advocate identity information and associated bank card information, get on this information transmit to its again line He Mou (say inside course of study " piece makings " ) ; The means that He Mou uses short message test and verify is passed quick pay to brush or use small letter in pilfer of rich colour website, pay treasure to be in Beijing east the store undertakes consumptive. In the time of a month, li Mou of in collusion with of Hu Mou of the accused person, He Mou commits the crime 1 case, other of in collusion with commits the crime 2 cases, purloin other property adds up to 8671 yuan.
Notable is, this black produce technical vitality very tenacious, although pay close attention to and be hit by place of much ground police, but still live below heavy fist punish up to now.
Does 1000 yuan smell spy technology want price only actually 30 yuan?
New capital signs up for a reporter to investigate discovery, equipment of sound of short message smell easy, operation is handy, it is actually black produced practitioner to establish quite low threshold.
"Need mobile phone of C118 of a Motolora to be able to realize explore of short message smell only. " a personage inside course of study tells new capital newspaper reporter, "On the net, can buy easily. Can buy easily..
In platform of some cable business, the reporter passes search keyword " collect C118 " hind, appear 12 the name is " C118 is collected implement systematic software complete set " commodity. Among them cover of great majority commodity or the systematic tiring-room that succeed for smell explore, or good to had changed his costume or dress Motolora C118. Reporter of new capital newspaper notices in the cover photograph bottom in tiring-room of a system, "Hello! You at 2018-11-29 18:25:16. Use platform of exterior cable business to fill value service to be number of × of × of × of × of × of × of 135 × × to charge a cost 50 yuan " this word is used red line is tagged. "Online study, include church equipment and system, can monitor a diameter to make an appointment with the 2G short message of 500 meters of limits. " among them one sells the home to tell new capital newspaper reporter, "Complete set equipment and systematic code in all 1000 yuan. "Complete set equipment and systematic code in all 1000 yuan..
Reporter of new capital newspaper sell the home in order to buy equipment of an identity and sound of much name smell to get in touch. To reveal the authenticity of the product, almost of equipment of every smell sound sell the home, can show the video that a large number of its equipment run normally actively to the reporter. In the fan voice that with a buzz cries, the Motolora C118 that they will changed their costume or dress and notebook computer connection are appropriate. After entry system before long, the short message content that experimental mobile phone receives can appear in the screen with the yellow extensive in video.
However, to this technology, actually " do not be worth 1000 yuan " .
"Those are to cheat what just entered the Xiaobai of travel, the price of this equipment is completely equal in value the price at hardware, won't exceed 100 yuan. " Laolv tells a reporter. Introduce according to its, on hardware, need to buy to be less than the Motolora C118 mobile phone of 30 yuan of money only, with a few component of commonly used electron changes his costume or dress but; And on software, compile has revised OsmocomBB into Motolora C118 mobile phone inside, can add smell explore function for the mobile phone.
Public data shows, osmocomBB is the project of GSM agreement implementation that opens a source thoroughly to applied layer from hardware layer. Because be a source, black it is OK to produce practitioner easy to do obtain this code, need not learn even in great quantities professional knowledge, can come true and imitate GSM agreement, change at will according to oneself demand, add a function.
Encircle personage Yu Xiaokui according to safety (alias) Xiang Xinjing signs up for reporter introduction, besides Motolora C118, still have the many type that Motolora, Suoniaili believes, all can be used at this technology. But, motolora C118 is become however numerous black those who produce practitioner not 2 choices. "Motolora C118 compatibility is best, low-cost, also made the most appropriate mobile telephone so. " Yu Xiaokui says.
Be worth what carry is, what test and verify of partial platform short message piles up content is unreasonable, also provided guilty breeding ground secondhand actually. "Actually, this equipment can smell explore arrives content of 2G short message, but not can smell explore arrives mobile phone date. " Laolv says frankly, "Content of a lot of short messages in user mobile phone includes the mobile phone number of the user, log onto a few platform full a cost with date of this mobile phone, click next change a password to perhaps charge a cost directly, OK the technology runs now. OK the technology runs now..
Look in Laolv, the test and verify that hair of a few platform gives an user includes telephone number directly in the code, also be actually black the advantage with produced practitioner to offer definite. "Nevertheless, also special mobile phone number is collected implement the mobile phone bugle call that can collect an user. Also special mobile phone number is collected implement the mobile phone bugle call that can collect an user..
Be aimed at 2G signal only? Fall to also want caution for 2G from 4G
Last year on September 17, week of conduct propaganda of safety of 2018 nations network -- network safety exposition kicks off, have exhibited a house to exhibit black ash produces a variety of networks commit the crime tool, include to be able to sad among them of short message of mobile phone of silence spirit away " equipment of sound of smell of 2G short message " .
According to introducing, price of total material of equipment of sound of smell of 2G short message is not worth 100 yuan, but can accomplish the short message content that gets circumjacent one, the harm is particularly great. Base the station arrives with broadcast means transmit in user hand sum close short message, can be defeated to solve by intercept of this equipment place reductive come out, final by black produce an user to realize pilfer of information filch, capital to brush wait for crime with network bilk. This kind of crime before this is aimed at shift and UniCom only, do not be aimed at telecommunication, at the same time this kind of crime is aimed at 2G signal only.
"But actually, the mobile phone is gone to likely also below the specific scene when 3G or 4G by monitoring, the reason is squelch through special device or signal quality not beautiful brings about signal to fall frequency. " know to start house the Sui Dynasty of 404 labs assistant inspector general just told new capital newspaper reporter.
"2G opens a source namely originally, also did not add in data transmission process close. " Sui Gang says to reporter of new capital newspaper, in explore of short message smell, c118 mobile phone just is acting the part that a bogus radical stands.
Bogus radical station says again " holiday radical stands " , all sorts of letters that can use mobile letter to make process of the mobile communication of the system that monitor that monitor medium make process, obtain the positional information with mobile phone current user. According to communication agreement world " game is regular " , who will follow you first " handclasp " , equipment is met preferential make a response. After bogus radical station is started, can be disturbed and screen is certain the operation business signal inside limits, a mobile phone name around can be searched later, active handclasp, send the short message these number to go up. The signal of screen operation business can last 10 seconds arrive 20 seconds, the short message is pushed send after finishing, ability of mobile phone of the other side searchs signal afresh.
Those who give illegal element an opportunity that can be exploited to sbs advantage, it is the natural blemish of 2G network however. "Its framework itself opens 2G network namely of the source, the GSM agreement that its use also is proclaimed in writing is transmitted. Because was not added close, be so in transmission process is OK smell explore arrives. C118 join comes computer, the network that uses similar Wireshark next catchs packet of tool to grab a sack directly, can catch all instructions in communication process. " Sui Gang says.
Actually, the technology of spy of smell of GSM short message that sounds appalling is not the soft costal region that does not have his. According to Introduction Sui Gang, of technology of spy of smell of GSM short message short board, basically have two sides, "It is Motolora C118 on one hand emissive power is limited, black produce practitioner to be in only ' prey ' around when explore of ability implementation smell, the distance is restricted badly; It is this kind of method on the other hand gotten information is more onefold, can get stack of short message test and verify only, can do the business related to code of short message test and verify only so. Can do the business related to code of short message test and verify only so..
Sui Gang says: "The business that we can do still has a lot of, e.g. the substance such as U aegis hardware of 2 paces attestation can be on guard well this kind of attack.
Entire chain: Get Id date, bank Zhang bugle call, pay Zhang mark
New capital signs up for a reporter to investigate discovery further, attack of explore of smell of GSM short message realizes entire chain basically already to change. In the short message test and verify of telegraphic user number of code, mobile phone is hijacked on the foundation, black produce practitioner to be able to be versed in through the company the means such as the library gets bugle call of Zhang of Id number, bank, pay platform Zhang date to wait for sensitive information.
Be in the name is " explore of smell of C118 research company learns group " QQ group in, a advertisement related to inquiry individual information show, "Can examine calorie of check " . Media ever alluded in the report, reporter expenditure buys colleague track 700 yuan, include to seize the opportunity, room, on 11 records such as the Internet bar. Be in another the name is " short message equipment " QQ group in, one professes to sell short message number is collected implement sell the home to express, "Collect through number implement the mobile phone number that can collect certain limits. "Collect through number implement the mobile phone number that can collect certain limits..
In this QQ group in, copolymerization collect wears 377 black produce practitioner. Everyday, how " profiteer " become group inside study and discussion central issue.
So, black how is producing practitioner to pass mobile phone date to come to those who examine a variety of individual information? New capital signs up for reporter discovery, through the company labour library realizes the inquiry of individual information not hard. Library of alleged company project, namely library of gather of data of a data, the bag contains the data that is revealed in great quantities. Pass these data, the company is versed in the use person of the library can outline the network draw a portrait of an user easily.
The personage that is close to black ash to produce points out, superintend as home send more strict, company project library is offerred only commonly black produce gang interior to use. And, at present ash produces practitioner to have the tendency that transfers to abroad. On dark net a certain trade in the market, discovery of reporter of new capital newspaper is included in great quantities " individual information inquires " trade post. Show in a cards among them, can check census register information, information opening a room, marriage, broadband. Trade in this in post, differ according to inquiring information, price also differs from 0.014BTC-0.15BTC. In making easy information general survey, show, this commodity unit price is 1 dollar, the user can buy an amount to satisfy different requirement through adjusting. Trade in the dark network that cannot trail in the market, this service " have quite sell " , up to on April 28, this commodity shows already was bought 1368 times.
■ analysis
Does short message test and verify pile up safety?
Those who grow in intensity is black produce, cause test and verify of short message of people adversary machine to pile up the discussion with whether enough safe itself. Concerned personage expresses, the thing that code of mobile phone test and verify can accomplish now (turn Zhang, real name) the limits that had been head and shoulders above itself security.
According to " 2018 networks black ash produces processing to study a report " estimation, dimensions of industry of safety of our country network was many yuan 450 2017, and black ash is produced already amounted to nearly one billion two hundred and fifteen million seven hundred and fifty-two thousand one hundred and ninety-two yuan of dimensions; Annual is divulged because of information of rubbish short message, bilk, individual information wait for the pecuniary loss estimation that cause to amount to 91.5 billion yuan. And telegraphic bilk record is annual with 20% be in to the speed of 30% growth.
Occupy Alian additionally to clear completely lab statistic, came to will monitor telegraphic bilk in all in December in April 2017 tens of 10 thousand, loss of case hair capital crosses 100 million yuan, the member that involve a victim counts a person, house of telegraphic bilk case does not fall high, dimensions is changed upgrade ceaselessly. 2018, active professional technology black ash produces platform to amount to hundreds.
So, face the black ash with so giant dimensions to produce, whether has code of short message test and verify appeared have too many problems to deal with? To this, sui Gang thinks, although be below the scene of smell explore, code of short message test and verify is insecure, but come round to say with respect to eye, code of short message test and verify still is a practical plan.
"With respect to eye antecedent condition looks, if short message test and verify the code changes way of other test and verify, aeriform cogency can increase use cost surely. " Sui Gang tells new capital newspaper reporter, "Safety is opposite, look be willing to pay how old price. With convenient sexual photograph balance, code of short message test and verify is relatively right. Safe itself is promotion attacks the cost that prevents both sides, do not have absolute safety. Do not have absolute safety..
How be on guard explore of short message smell?
So how to prevent by black produce intercept and capture a short message? In Feburary 2018, secretariat of committee of technology of standardization of countrywide information safety is released " network safety carries out a guideline -- answer intercept and capture short message test and verify to pile up executive network identity the technology of sham attack is how-to " .
This are how-to point out, aggressor is in after intercepting and capture short message test and verify to pile up, can sham victim capacity, the mechanism of safety of identity test and verify that serves a provider successfully through shift application, website, pilfer brushs executive credit card wait for network crime, bring pecuniary loss to the user. How-to point out at the same time, blemish rehabilitate difficulty is great. Current, GSM network uses technology of authority of one-way ancient bronze mirror, and short message content is transmitted with form of proclaimed in writing, this blemish is caused by GSM design, and GSM network covers range wide, because of this rehabilitate difficulty big, cost is high. In atttacking a process, mobile phone signal of the victim is hijacked, sham victim capacity receives aggressor communication network, the victim becomes aware hard commonly.
So, face the menace of explore of smell of GMS short message, whether are we at a loss what to do really? Have expert proposal, the user can ask operation business opens VoLTE function (a kind of data transmits a technology) , be on guard thereby the likelihood that the short message is hijacked. "That is to say, use 2G network to transmit a short message no longer, let a short message be transmitted through 4G network however, be on guard thereby short message of wireless monitoring filch. " also the expert thinks, operation business should replace 2G network as soon as possible. Lv of take an examination of communication operation business is accelerated eliminate 2G network technique, ensure with older rate information is safe. According to introducing, in the world, 2G network already was abandoned by place of business of a lot of operation.
Afore-mentioned how-to also suggest each mobile application, website serves a provider to optimize measure of user identity test and verify, choose a kind or use a variety of means combination, enhance security: If the short message goes up test and verify (provide the function that delivers capacity of test and verify of short message in order to actively by the user) , speech communicates code of transmission test and verify, commonly used equipment is bound calm, biology feature identifies, means of test and verify of dynamic choice identity.
New capital signs up for Lidawei@xjbnews.com of reporter Li Dawei
