Recently, a piece of news about criminals using technical means to accurately locate others has once again sounded the alarm for network security. Chen and Zhou have a debt dispute. Chen found that Zhou could always keep track of his whereabouts. Even if he was on a business trip, the other party could accurately know his location and continue to collect debts from him. Chen's work and life were seriously affected, and unbearable, he chose to call the police for help. The police investigation found that after Zhou paid a fee to register on the "Extreme Positioning" illegal website, he packaged the positioning page into a small program link and sent it to Chen. After Chen clicks to allow obtaining the location, Zhou can accurately obtain Chen's location information through the background. In the end, Zhou and software developer Peng were prosecuted for allegedly infringing on citizens' personal information and were sentenced to one and three years in prison respectively.
The "Secret Stealing Trap" Hidden in the Link
Different from traditional Trojan viruses and tracking devices, the current invisible and highly concealed link positioning methods derived from the black and gray products of the Internet are extremely confusing.
——Disguise your appearance and lower your alertness. Criminals will package malicious links into electronic invoices, meeting notices, bill reminders, voting pages, etc., and use "backdoor" disguises to lower people's alertness. If you are not careful, you may be tricked.
——Create urgency and interfere with judgment. Criminals will use words with a sense of urgency such as "overdue" and "account will be frozen" to create time anxiety and make people click hastily without having time to verify the source.
——Defraud authorization and obtain privacy. After the user clicks on the link, requests such as "Allow access to location" and "Allow access to address book" will pop up on the page. Once the user clicks "Allow", sensitive permissions may be given away, resulting in personal privacy information being "unobstructed".
——Induced installation, long-term latent. Some malicious links induce users to download unknown applications. These apps may hide icons, run silently in the background, and steal private information such as album photos, account credentials, etc. over a long period of time.
"Small links" may cause "big harm"
A seemingly simple click may not only cause personal privacy leaks, but may also bring risks such as property damage, which requires a high degree of vigilance.
——Property privacy is under threat. Information such as location, address book, and bank card obtained through malicious links may flow into the black and gray network industry chain. Criminals will use this information to carry out illegal and criminal activities such as precision fraud and identity theft, endangering people's property security and infringing on personal privacy.
——The data is lost and the intranet falls. After the device is maliciously controlled, it may become a springboard to penetrate the company's intranet. Attackers may use intranet trust relationships to scan horizontally and steal contracts, project materials, scientific research results, etc. They may also paralyze internal information systems and affect normal office order.
——Directed delivery, hidden "black hand". When the targets of malicious links involve personnel in confidential positions, criminals can analyze the unit's activity patterns based on the collected personnel information and carry out targeted delivery to key personnel, thereby stealing state secrets and causing harm to national security.
National security agency reminder
Network security is no small matter. The more vigilance you have, the less losses you will suffer. Only by tightening the precautions can we stay away from various risks.
——The link verification is more "real". To identify malicious links, first check whether the domain name is standardized, and be more vigilant when encountering unfamiliar or unusual suffixes or garbled characters; secondly, check whether the content is abnormal. If the link is forced to be shared, the risk is often higher; also pay attention to whether there are abnormal jumps, frequent pop-up ads or jumps to unknown websites, which should be closed immediately; finally, check whether the source is reliable, and be extra careful with unfamiliar links, especially links pretending to be official.
——Permission management is a bit "stingy". When faced with a pop-up permission request, first determine whether the application really needs this permission. Permissions that are not related to core functions should be authorized with caution. At the same time, regularly check the system settings and turn off unnecessary "always allow" to cut off the data leakage path from the source.
——Reports should be dealt with in a more timely manner. If the general public discovers suspicious clues about using malicious links to carry out espionage and secret theft activities, they can report it through the 12339 national security agency report acceptance hotline, the online report acceptance platform (www.12339.gov.cn), the Ministry of National Security WeChat public account report acceptance channel, or directly to the local national security agency.
