The "data empire" of hacker teenagers: high school students steal 100 million pieces of citizen information.

通过admin

The "data empire" of hacker teenagers: high school students steal 100 million pieces of citizen information.

  On the 27th day, Liu Jiale (pseudonym) received two or three sets of clothes from his father. When he saw that his father’s coat was still in the package, he immediately burst into tears.

  The young man who just turned 18 told the reporter of China Youth Daily and China Youth Network that his father, as a middle school math teacher, has always been cautious. When preparing clothes this time, he must have kept his mother in the dark and didn’t want to make her sad, so he put his clothes in.

  Liu Jiale is a party in the recent news "High school students stole 100 million pieces of citizen information and made a profit of 20,000". A few days ago, a reporter from China Youth Daily and China Youth Network had an exclusive conversation with him in Wuxi No.2 Detention Center.

  achievement

  Liu Jiale’s hometown, Xinyi City, Guangdong Province, borders Guangxi, and in his eyes, it is a "five-tier city with blocked information".

  "When I was a child, no one played with me, and I often played computer alone." Liu Jiale’s parents are dual-employed, and they are both busy at work. My father is a high school math teacher and taught him math very early. In elementary school, Liu Jiale learned a lot of knowledge in junior high school. However, introverted as he is, he doesn’t seem to associate with his classmates, and his "high IQ" doesn’t seem to attract the love of his classmates, and he even feels that he is unsociable.

  Liu Jiale doesn’t want to recall the three years of junior high school, which was full of fights and teachers and students didn’t get along well, and he doesn’t like basketball, football and other activities that most boys like. The only thing that makes him "rare" is that he studies at night at 10 o’clock every night, and when he comes home, he enters the online world where he can escape the loneliness in reality and bring a sense of accomplishment.

  Liu Jiale is good at math and English, and often visits some domestic and foreign technical post forums. In his freshman year, he learned how to write software programs by himself by watching some videos and examples. Programming has brought him a sense of accomplishment that he has never had in class.

  At first, he was keen to find loopholes in various commercial websites. Liu Jiale calculated that in 2018 alone, he found about eight or nine vulnerabilities in well-known websites such as Tencent, Baidu and Ali, and gave feedback through the network emergency response centers of major companies. "They are all common vulnerabilities rather than high-risk vulnerabilities".

  Found loopholes in the "iron wall" built by these commercial websites, which were not found by many technical masters who graduated from "985" prestigious schools, which made Liu Jiale feel that "the days are particularly fulfilling". Although only 200 yuan won the prize every time, and 1000 yuan won the most prize, he felt that this sense of accomplishment had nothing to do with interests.

  empire

  When 14-year-old Liu Jiale was wandering in an online forum, some netizens mentioned the "dark net". Later, he tried to climb over the wall, and saw a different world after logging in to the website of the dark network.

  "Everything is sold, horror porn videos, all kinds of detailed personal information." Among them, in addition to name, region and date of birth, personal information also includes real estate, bank card, personal household registration and family household registration, as well as mobile phone information and mobile phone positioning.

  Later, when a familiar netizen found him and asked him to help buy household registration information on the "dark net", he helped this friend buy personal information several times with the idea of "experiencing the process". "The price ranges from a dozen yuan to hundreds of yuan." In his view, both buyers and sellers are voluntary, and they just help to provide the intermediary of contact information.

  In the second half of 2017, Liu Jiale saw the method of inquiring personal information of network users in the forum post bar, and became interested in it. Within a month, he successfully wrote a software, which can be connected to Baidu Post Bar through the built-in interface, and constantly log in with different mobile phone numbers by bumping into the library to obtain account information corresponding to the mobile phone number. In June 2018, Liu Jiale compiled another software that can obtain information in batches.

  He divided the software into many mobile phone number segments, rented more than a dozen servers overseas, and the collected data would be automatically imported into the rented network database. In less than a month, hundreds of millions of personal information were stored in his database.

  In the network black market, Liu Jiale’s personal information database is urgently needed by many network black and gray products. Some people want to find a poster in Baidu Post Bar, so they provide an account. Liu Jiale can find the mobile phone number corresponding to the account by searching the information base. Of course, some people found Liu Jiale, hoping to buy a "good-looking ID account" that has been registered by others, but has been restricted.

  Liu Jiale established WeChat group and QQ group in domestic network, used chat tools such as "Telegram" overseas, self-compiled "information inquiry" robot, peddled the database to others in the form of monthly inquiry, and went over the wall overseas by connecting VPN, selling the database with bitcoin as trading currency for two months, with a total profit of about 20,000 yuan.

  Liu Jiale told the reporter of China Youth Daily and China Youth Network that in August, 2018, he found that there were other data packets for sale in the market. He guessed that other hackers had also mastered the loophole of Baidu Post Bar, so he gave feedback to Baidu Post Bar and closed the loophole.

  According to his original idea, he will sort out hundreds of millions of personal information in the database, and then obtain personal information of citizens such as user name, real name corresponding to mobile phone number, home address, etc., and realize real-time positioning of latitude and longitude by technical means, thus establishing a powerful "data empire".

  "It may take more than ten minutes for others to find a specific piece of information from hundreds of millions of pieces of information, but it only takes 0.2 seconds to pass through my database." Liu Jiale said.

  power

  Someone knew that Liu Jiale had this database and wanted to buy it at a high price, but he thought, "How do I know what he will do after buying it, but I feel that there is a bottom line for what I do, and I won’t do things that deceive people and harm people."

  However, he did not know that his illegal acquisition of hundreds of millions of accounts and mobile phone numbers had seriously violated the law.

  In September 2018, the police in Huishan District of Wuxi received a report from netizens. Some people sold citizens’ personal information and hacking software used to steal information on forums, post bars and other platforms. The police in Huishan District filed a case for investigation at the first time and arrested the 26-year-old suspect Fu Qiang (a pseudonym) from Jiangxi across the province.

  Fu Qiang’s net name is "Qingfeng". He once bought a hacking software from the netizen "I Chunqiu" to illegally obtain citizens’ personal information, and made an illegal profit of thousands of yuan. "I Chunqiu" is the screen name of Liu Jiale.

  In April this year, Wuxi Huishan police went to Guangdong to investigate Liu Jiale. As he was about to usher in the college entrance examination, the public security organs took bail measures for him during the investigation and allowed him to take the college entrance examination.

  But Liu Jiale failed in the college entrance examination. "since the police came to the door, the mood has often collapsed."

  In August this year, Wuxi Huishan District People’s Procuratorate approved the arrest of Liu Jiale. What greeted him was not the university, but the life in a detention center in a different place.

  Xu Jingchao, the procurator in charge of the Huishan District People’s Procuratorate in Wuxi, pointed out that the case has a large amount of data, and the illegal acquisition of citizens’ personal information is accurate, which endangers the security of citizens’ personal information and even the security of national data and information. Now it has been appealed to the court. However, the criminal suspect was a minor at the time of committing the crime, and even if he is an adult now, he still belongs to a minor crime and should be given a lighter or mitigated punishment according to law.

  "Hackers are a group of people who are fascinated by technology, but they also have their own basic ideas." Wu Xingmin, director of the Department of Public Administration in guangdong police college and director of the Pearl River Delta Institute of Public Safety, has spent three years on hackers.

  After in-depth interviews with many hackers, Wu Xingmin found that hackers are generally young, introverted and sometimes out of place compared with their peers, but they are extremely confident in their own technology.

  Wu Xingmin analyzed that some hackers today "often can’t tell the difference between breaking technical barriers and breaking information protection, and may have seriously violated the law without knowing it". Some hackers’ crimes are not entirely due to their weak legal awareness. "A hacker certainly knows that it is against the law to illegally steal other people’s information, but the technology he has is the power he has. As the saying goes, losing the power of supervision will inevitably lead to corruption. When this technology can give him a strong sense of strength, he may think that I can, so why not do it? "

  Wu Xingmin said: "With the growth of age and psychological maturity, many young hackers who were obsessed with network technology have been engaged in network security and have a better way out."

  Liu Jiale, who is wandering in the online world, is still confused. He can always see a variety of statements about one thing. It seems that each one makes sense, and he has no answer in his heart.

  He described the feeling to reporters as if he had been educated for a long time as "1+1=2" and suddenly one day he saw "1+1=3". "At first, I was very exclusive and thought it was ridiculous. But later I will doubt whether what I accept is correct. "

  "When teenagers are not supported by a sound knowledge theory system, they will easily get confused and even make wrong judgments when they accept too much complicated and confusing information." Wu Xingmin believes that it is necessary to guide them, or even limit them, when their concepts of right and wrong and their ability to distinguish between right and wrong are still not very strong.

  dream

  In fact, Liu Jiale has always had a wish.

  In 2018, during the summer vacation of his sophomore year, he learned from the Internet that china computer federation held the National Youth Informatics Olympic Competition, and he wanted to participate. However, he learned that senior three students were forbidden to participate in the competition according to regulations, so he had to sign up for the online synchronization competition.

  After the competition, china computer federation provided an electronic version of the competition results certificate for the players who participated in the online synchronous competition, and Liu Jiale was the only player in his city.

  After the third year of senior high school, Liu Jiale saw the questions of the offline competition on the Internet, and "basically all of them can be answered".

  In his view, the information in his hometown is very backward, and teachers and classmates don’t care much about it. At that time, he was "full of thoughts" about participating in various flag-winning competitions (in the field of network security, it refers to a form of technical competition among network security technicians — — Reporter’s note)

  "There are non-governmental organizations, and ‘ 985’ Organized by colleges and universities, it is very fulfilling to participate in the flag-winning competition. " When talking about these competitions, Liu Jiale in handcuffs speaks very fast.

  In the detention center without internet, Liu Jiale finally returned to the real world.

  He recalled the people he had known and contacted in reality. "I don’t have any friends. Most of the people I usually talk to are netizens and have never met."

  Father is the only person he confides in. "I am very interested in history and religion, but I don’t know how to talk to others about some topics. Father will listen to me quietly, although most of the time he can’t talk. "

  Liu Jiale has a favorite university. When the sophomore enrolled in the computer competition, he also expected that if he won the prize, he would become a bonus item for independent enrollment. However, in September this year, the university has decided to miss him, which made him suddenly feel that "time is running out" when he just turned 18.

  In the detention center, Liu Jiale pondered a realistic life topic: Is it better to be an ordinary person or a special person? "Maybe it’s better to be an ordinary person." After a long silence, he said with his head down.

  China Youth Daily China Youth Network reporter Li Chao Intern Cheng Rong

关于作者

admin administrator