青鸥宋祁
www.qosq.com

京东12个G数据遭泄露,身份证、密码、电话等信息

1-webp

最近,黑市上出现重磅“炸弹”,一个12G的数据包开始流通,其中包括用户名、密码、邮箱、QQ号、电话号码、身份证等多个维度,数据多达数千万条。

而黑市买卖双方皆称,这些数据来自京东。

京东方对此表示,正在紧急核实数据真伪。

01、数据之迷

最近,因为这12G的数据包,黑产再次被搅动。

一些地下渠道,开始对数据进行明码标价交易,价格从“10万到70万”不等。

2

3

 

▲ 数据分为几个维度:姓名、密码、邮箱、QQ、身份证、电话等

据业内人士称,数据已被销售多次,“至少有上百个黑产者手里掌握了数据”。

“数据外泄的时间已比较长了,至于为何现在又流通,原因未明,”业内人士透露,暂且很难确认是“内鬼”还是“黑客盗取”。

业内人士称,大部分数据外泄后,黑客会先进行洗库,登录账户将有价值的内容清洗一遍,比如登录游戏账户,将虚拟币转走。一般这个清洗过程,需要几个月甚至更长时间。

第二次“洗库”,才会将数据出售,“数据价值榨取殆尽了,再给市面上的人来分渣”。

值得注意的是,这些数据的用户密码都进行过MD5加密,要通过专业破解软件,才能得到原密码。

业内人士称,一般MD5破解需要一定时间,但有些密码在数据库中已被其他人解密过,能瞬间破解,比如123456;如果是一个新密码,破解时间就较长。

可瞬间破解的账号,一般只占3-5%。

记者尝试根据部分用户名和破解的密码登陆,确实大部分可登陆京东账户。

▲ 姚鑫的密码就可瞬间破解(设计一个复杂密码是多么重要)

登陆之后,用户在京东上的订单、地址、交易等信息都一览无遗。

甚至一本财经记者从数据库中搜索自己名字,发现信息也早已外泄。

“黑客拿到这些数据,还可进行撞库操作”,业内人士称。

所谓“撞库”,是一个黑产的专业术语。

就是黑客会通过已泄露的用户名和密码,尝试批量登录其他网站,获取数据。

这就是人类设计密码的缺陷,大部分人为了记得住,都会用同一个用户名和密码,导致撞库成功率极高。

伤害值最高最直接的,就是撞进一些金融账户,直接将资金转走。

12月9日,一本财经向京东核实相关情况。截止发稿前,京东给出的最新回应称,目前正在找技术部门紧急核实,暂时还无法确认数据真伪。

02、绝非孤案

实际上,京东已不是第一次被曝数据外泄。

2015年,京东就被曝出大量用户隐私信息泄露,多名用户被骗走金钱,总共损失数百万。

直到一年后,京东才公布调查结果,称是因为出现“内鬼”。

所谓的“内鬼”,是3位物流人员,通过物流流程,掌握了用户姓名、电话、地址、何时下单、所购货物等信息,总数据达到9313条。

而电商平台,一直是数据泄漏的重灾区之一。

2014年年初,支付宝被爆20G用户资料泄漏。

后经调查,此次泄漏是“内部作案”:支付宝前技术员工李明,利用职务之便,多次在公司后台下载用户资料。

这20G资料,包括用户个人的实名、手机、电子邮箱、家庭住址、消费记录等,相当精准。

李明和两位同伙,将用户资料按条数出售,价格不等,价值较高的,一条可卖数十元;也有人以500元的代价,购买了3万条用户信息。

这个故事中更有意思的部分是,购买这些数据的买家,都是“友商”,比如其他电商平台。

除了支付宝,早在2012年,1号店被曝网上商城员工与离职、外部人员内外勾结,90万用户资料泄露,价格只需500元。

可见“内鬼”是电商信息泄漏的重要原因,除此之外,电商平台由于自身技术漏洞,被黑客戳中软肋,盗走数据,也是常见现象。

2014年,是电商平台安全风险集中爆发的一年。

3月,当当网113位用户账户余额被盗用。

黑客先是盗取用户登录信息,然后修改用户绑定手机、邮箱地址等信息,最后购买电子产品等贵重商品。

当当网在舆论重压下,宣布给予用户补偿。

同月,乌云漏洞平台曝光携程系统存技术漏洞,可导致用户个人姓名、身份证号码、银行卡类别、银行卡卡号和银行卡用于支付的6位Bin码等重要信息泄露。

而携程随后发布声明表示,确认共93人账户存安全风险,已通知相关用户更换信用卡。

年底,中国铁路购票网站12306的6个子网站存在高危漏洞,致数十万条用户数据外泄,包括用户账号、明文密码、身份证、邮箱等敏感信息在内的数据被贩售。12306宣布悬赏、号召网友查找漏洞。

不论是内鬼作祟还是黑客攻击,无非都是利益驱动。

03、数据之痛

地下的庞大数据产业链,已然形成。

网民被泄露的信息主要分为两类:个人信息包括姓名、身份证号、手机号码、家庭住址、工作单位、邮箱账号和密码、网购信息、购车、购房情况、医疗信息等各类信息;

网上活动信息包括通话记录、网购记录、网站浏览痕迹、IP地址、软件使用痕迹及地理位置等,涵盖范围非常广泛。

而地下的数据库,已可以从200多个维度了解一个人——甚至能比你自己更了解你自己。

这些泄露的数据,最终以各种方式,成为不法分子获利的工具。

今年,人民日报发文称,有78.2%的网民个人身份信息被泄露过,63.4%的网民个人网上活动信息被泄露过;而有82.3%的网民亲身感受到了个人信息泄露给日常生活造成的影响。

黑产之手,已延伸到普通百姓生活,到了触手可及的地步。

仅在2015年一年,中国网民因信息泄露问题,导致的损失是805亿人民币——这只是对外公开的可查数据。

实际上,因为大数据的崛起,各家对数据的渴求度极高,加速了黑产数据的流通。

一本财经在《》中曾经调查黑产链条,从事数据买卖中间商,多达几万人,数据的每一次流转,价值上万到百万不等——地下黑市,恐怕早已形成万亿级别市场。征信之乱

用户的隐私和信息,就如此公然成为贩卖品,在黑市上肆无忌惮地流动。

数据之痛,已让所有人感同身受。

然而,这个问题,却不是做好安全工作就能解决的。

除了技术,还得防住人性的贪婪。


赞(0)
未经允许不得转载:青鸥宋祁‘s blog » 京东12个G数据遭泄露,身份证、密码、电话等信息
分享到: 更多 (0)

评论 83

  • 昵称 (必填)
  • 邮箱 (必填)
  • 网址
  1. #1

    66

    37个月前 (04-17)回复
  2. #2

    快快快

    山间的树4个月前 (07-16)回复
  3. #3

    Hey I know this is off topic but I was wondering if you knew of any widgets I could
    add to my blog that automatically tweet my newest twitter updates.
    I’ve been looking for a plug-in like this for quite
    some time and was hoping maybe you would have some experience
    with something like this. Please let me know if you run into anything.
    I truly enjoy reading your blog and I look forward to
    your new updates.

    web hosting sites3个月前 (08-10)回复
  4. #4

    I believe what you said made a bunch of sense. But, think about this,
    suppose you wrote a catchier post title?
    I am not suggesting your content isn’t good, but what if you added a headline to maybe grab people’s attention? I mean 京东12个G数据遭泄露,身份证、密码、电话等信息-青鸥宋祁‘s blog is a little boring.
    You ought to glance at Yahoo’s front page and note how they create news
    headlines to grab viewers to click. You might add a related video or a related pic or two to get people interested about
    what you’ve got to say. In my opinion, it might make your posts a little bit more
    interesting. adreamoftrains web hosting company

  5. #5

    I have fun with, cause I found exactly what I used
    to be looking for. You have ended my four day lengthy hunt!
    God Bless you man. Have a great day. Bye

    web hosting providers3个月前 (08-12)回复
  6. #6

    Have you ever considered creating an e-book or guest authoring on other sites?
    I have a blog centered on the same ideas you discuss and would love to have you share some stories/information. I
    know my visitors would value your work. If you’re even remotely interested, feel free to send me
    an e mail.

    free v bucks2个月前 (08-24)回复
  7. #7

    Hi! I could have sworn I’ve visited this blog before but after browsing through many of the posts I realized it’s
    new to me. Anyhow, I’m certainly pleased I discovered it and I’ll
    be bookmarking it and checking back regularly!

    cheap flights2个月前 (08-26)回复
  8. #8

    Howdy! This post couldn’t be written any better! Looking at this article reminds me of my previous
    roommate! He constantly kept preaching about this.
    I most certainly will send this article to him. Fairly certain he’ll
    have a very good read. Many thanks for sharing!

    best diet guide2个月前 (08-27)回复
  9. #9

    Undeniably believe that which you stated. Your favourite reason appeared
    to be at the internet the simplest factor to have in mind of.
    I say to you, I certainly get irked even as folks consider concerns that they just don’t understand about.
    You managed to hit the nail upon the top as smartly as defined out
    the whole thing without having side effect , people can take a signal.
    Will likely be again to get more. Thanks

    pokmon go hack2个月前 (08-29)回复
  10. #10

    Pretty nice post. I just stumbled upon your weblog
    and wished to say that I have truly enjoyed browsing your
    blog posts. After all I’ll be subscribing to your rss feed and
    I hope you write again soon!

  11. #11

    I’m really enjoying the design and layout of your
    site. It’s a very easy on the eyes which makes it much more pleasant for me to come here and
    visit more often. Did you hire out a developer to create your theme?
    Excellent work!

    hack brawl stars2个月前 (08-31)回复
  12. #12

    This site was… how do you say it? Relevant!!
    Finally I’ve found something that helped me. Thanks a lot!

  13. #13

    Good answer back in return of this difficulty with genuine arguments and explaining
    all regarding that.

    free robux2个月前 (08-31)回复
  14. #14

    Hey! This is my first visit to your blog! We are a group of volunteers and starting a new project in a community in the same niche.
    Your blog provided us useful information to work
    on. You have done a extraordinary job!

    coin master spin2个月前 (09-07)回复
  15. #15

    Greetings! I know this is kind of off topic but I was wondering which blog platform are you using for this site?
    I’m getting tired of WordPress because I’ve had problems
    with hackers and I’m looking at options for
    another platform. I would be fantastic if you could point me in the direction of a good platform.

  16. #16

    My brother recommended I would possibly like this
    website. He used to be entirely right. This submit actually made my day.
    You can not imagine simply how so much time I had spent for this information! Thanks!

  17. #17

    Its like you read my mind! You appear to know a lot about this, like you wrote
    the book in it or something. I think that you can do with some pics to drive the message home a bit,
    but other than that, this is wonderful blog. A great read.
    I will definitely be back.

    web design bucuresti2个月前 (09-08)回复
  18. #18

    Thanks a bunch for sharing this with all folks you actually realize what you’re talking about!

    Bookmarked. Please also seek advice from my site =).
    We could have a link alternate arrangement among us

  19. #19

    Good day I am so happy I found your blog, I
    really found you by mistake, while I was searching on Aol for
    something else, Anyhow I am here now and would just like to say
    kudos for a marvelous post and a all round interesting blog
    (I also love the theme/design), I don’t have time to read it all at the minute but I
    have bookmarked it and also included your RSS feeds, so when I have time I
    will be back to read more, Please do keep up the fantastic jo.

  20. #20

    Wow, awesome weblog layout! How lengthy have you ever been running a blog for?
    you make blogging look easy. The full glance of your
    web site is fantastic, as well as the content material!

  21. #21

    Thanks for the marvelous posting! I really enjoyed reading it, you
    could be a great author. I will make sure to bookmark your blog and will often come back very
    soon. I want to encourage you to ultimately continue your great job, have a nice day!

  22. #22

    My brother recommended I might like this blog.

    He was once totally right. This submit truly made my day. You can not consider simply how much
    time I had spent for this info! Thank you!

  23. #23

    You actually make it appear really easy with
    your presentation however I in finding this matter to be actually one
    thing that I believe I’d by no means understand.
    It kind of feels too complicated and very wide for me.

    I’m taking a look ahead in your subsequent publish, I’ll try to
    get the dangle of it!

  24. #24

    I’m really enjoying the theme/design of your blog.
    Do you ever run into any web browser compatibility problems?
    A couple of my blog audience have complained about my
    website not working correctly in Explorer but looks great in Opera.
    Do you have any solutions to help fix this problem?

    free coinmaster spins2个月前 (09-11)回复
  25. #25

    Hello it’s me, I am also visiting this web page regularly, this web site is truly good and the visitors are really sharing good thoughts.

  26. #26

    I’m really impressed with your writing skills and also with the layout on your blog.
    Is this a paid theme or did you modify it yourself?
    Anyway keep up the nice quality writing, it’s rare to see
    a nice blog like this one these days.

  27. #27

    Amazing things here. I’m very glad to see your post. Thank you so much and I am having a look forward to
    contact you. Will you please drop me a e-mail?

  28. #28

    Peculiar article, totally what I wanted to find.

  29. #29

    It’s an remarkable article for all the online users; they will take benefit from
    it I am sure.

  30. #30

    Good site you have got here.. It’s difficult to find high quality writing like yours nowadays.
    I honestly appreciate individuals like you! Take care!!

  31. #31

    When some one searches for his required thing, thus he/she desires to be available that in detail, thus
    that thing is maintained over here.

    free v bucks2个月前 (09-16)回复
  32. #32

    Keep on writing, great job!

    bingo blitz freebies2个月前 (09-16)回复
  33. #33

    Hi there every one, here every one is sharing such knowledge,
    thus it’s pleasant to read this blog, and I used to
    go to see this web site every day.

  34. #34

    After I initially left a comment I seem to have clicked on the -Notify me when new comments
    are added- checkbox and from now on each time a comment is added I recieve four emails with the exact same comment.

    Perhaps there is a means you can remove me from that service?
    Thanks a lot!

    free robux1个月前 (09-19)回复
  35. #35

    Ahaa, its fastidious dialogue regarding this article at this place
    at this blog, I have read all that, so now me also commenting at this place.

    free robux1个月前 (09-22)回复
  36. #36

    Your way of describing all in this post is in fact nice, every one be capable of without difficulty know it, Thanks a lot.

  37. #37

    Currently it appears like WordPress is the best blogging platform out there right
    now. (from what I’ve read) Is that what you’re using on your blog?

    free netflix1个月前 (09-24)回复
  38. #38

    Thankfulness to my father who stated to me on the topic of this web
    site, this website is really awesome.

  39. #39

    As the admin of this site is working, no doubt very soon it will
    be famous, due to its feature contents.

    robux generator1个月前 (09-24)回复
  40. #40

    Everything is very open with a clear explanation of the issues.
    It was really informative. Your website is very helpful.
    Thanks for sharing!

    free psn codes1个月前 (09-24)回复
  41. #41

    I am actually glad to read this blog posts which contains tons
    of helpful facts, thanks for providing such statistics.

  42. #42

    Great article! This is the type of info that should be shared across the internet.
    Shame on the search engines for no longer positioning this publish upper!
    Come on over and consult with my web site . Thanks =)

  43. #43

    I am not sure where you are getting your information, but good topic.
    I needs to spend some time learning more or understanding more.
    Thanks for great info I was looking for this information for my mission.

  44. #44

    Appreciate this post. Will try it out.

    vbucks genetator1个月前 (09-25)回复
  45. #45

    Great site you have here but I was wondering if you knew of any forums that cover the same topics talked about in this article?
    I’d really like to be a part of online community where
    I can get advice from other knowledgeable individuals that share the
    same interest. If you have any recommendations, please let me know.

    Appreciate it!

  46. #46

    Attractive section of content. I just stumbled upon your weblog and in accession capital to say that I acquire actually loved account your
    blog posts. Anyway I will be subscribing on your feeds and even I success
    you get admission to consistently quickly.

    free robux generator1个月前 (09-25)回复
  47. #47

    This paragraph provides clear idea in support
    of the new users of blogging, that in fact how to do running a
    blog.

  48. #48

    Yesterday, while I was at work, my sister stole my iPad and tested to see if
    it can survive a 25 foot drop, just so she can be a youtube sensation. My apple ipad is now destroyed and she has 83 views.

    I know this is totally off topic but I had to share it with someone!

    amazon gift card free1个月前 (09-26)回复
  49. #49

    I do believe all of the concepts you have presented to your
    post. They are very convincing and will certainly work.
    Still, the posts are very short for starters. May you please extend them a bit from next time?
    Thanks for the post.

    vbucks genetator1个月前 (09-26)回复
  50. #50

    What’s up, all is going well here and ofcourse every
    one is sharing data, that’s actually good, keep up writing.

  51. #51

    Saved as a favorite, I really like your web site!

  52. #52

    Hey there would you mind stating which blog platform you’re using?
    I’m going to start my own blog soon but I’m having
    a difficult time making a decision between BlogEngine/Wordpress/B2evolution and Drupal.
    The reason I ask is because your layout seems different then most blogs and I’m
    looking for something unique. P.S My apologies for getting off-topic but I had to ask!

    get free robux2周前 (10-14)回复
  53. #53

    This is a very good tip particularly to those fresh to the blogosphere.
    Short but very accurate info… Many thanks for sharing this one.
    A must read article!

    robux generator2周前 (10-14)回复
  54. #54

    I am curious to find out what blog system you happen to be using?
    I’m experiencing some small security problems with my
    latest blog and I would like to find something more safe.
    Do you have any recommendations?

    get free robux2周前 (10-14)回复
  55. #55

    It’s going to be ending of mine day, but before end I am reading this great piece of writing to increase my
    know-how.

  56. #56

    WOW just what I was looking for. Came here by searching for JD12G

    robux generator2周前 (10-14)回复
  57. #57

    My partner and I absolutely love your blog and find the majority
    of your post’s to be precisely what I’m looking for.

    Do you offer guest writers to write content for yourself?
    I wouldn’t mind producing a post or elaborating on a lot of the subjects you
    write in relation to here. Again, awesome site!

  58. #58

    Hey There. I discovered your weblog using msn. This is a
    very neatly written article. I’ll be sure to bookmark it and come back to learn extra of your helpful information. Thanks for
    the post. I’ll certainly return.

  59. #59

    My brother suggested I would possibly like this blog. He was
    once totally right. This publish truly made my day.
    You cann’t believe simply how much time I had spent for this information! Thanks!

    free robux2周前 (10-14)回复
  60. #60

    Amazing! Its truly awesome piece of writing, I
    have got much clear idea about from this piece of writing.

    get free robux2周前 (10-14)回复
  61. #61

    Hi there, its nice post regarding media print, we all be familiar with media is a wonderful source
    of information.

  62. #62

    We stumbled over here from a different web address and thought I might as well check things out.
    I like what I see so now i’m following you. Look forward to looking
    at your web page repeatedly.

  63. #63

    Whats up are using WordPress for your blog platform?
    I’m new to the blog world but I’m trying to
    get started and set up my own. Do you need any html coding expertise to make your own blog?
    Any help would be greatly appreciated!

  64. #64

    I’m gone to say to my little brother, that he should also pay a quick visit this
    webpage on regular basis to take updated from newest reports.

  65. #65

    Hi there would you mind letting me know which hosting company you’re working
    with? I’ve loaded your blog in 3 different web browsers and I must say this blog loads
    a lot faster then most. Can you suggest a good web hosting provider at a honest price?

    Kudos, I appreciate it!

  66. #66

    Yes! Finally someone writes about free robux.

    free robux2周前 (10-14)回复
  67. #67

    Good day I am so happy I found your site, I really found you by accident, while I was browsing on Google for something else, Anyways I
    am here now and would just like to say cheers for a fantastic post and a all round
    interesting blog (I also love the theme/design), I don’t have time to read it all at the minute but I have book-marked it and
    also added your RSS feeds, so when I have time I will be back
    to read much more, Please do keep up the fantastic jo.

    get free robux2周前 (10-15)回复
  68. #68

    I have been surfing online more than 2 hours today, yet I never found any interesting article like yours.

    It’s pretty worth enough for me. In my opinion, if all web
    owners and bloggers made good content as you did, the net will be a
    lot more useful than ever before.

  69. #69

    I know this if off topic but I’m looking into starting
    my own weblog and was wondering what all is required
    to get set up? I’m assuming having a blog like yours
    would cost a pretty penny? I’m not very internet savvy
    so I’m not 100% certain. Any tips or advice would be greatly appreciated.
    Kudos

    free robux codes2周前 (10-15)回复
  70. #70

    Excellent blog here! Additionally your web site a lot up fast!

    What web host are you the usage of? Can I am getting your associate link in your host?
    I desire my site loaded up as fast as yours lol

  71. #71

    I relish, lead to I discovered just what I used to be taking a look for.
    You have ended my four day long hunt! God Bless you man. Have a great day.
    Bye

  72. #72

    Hi to every one, for the reason that I am really keen of reading this
    website’s post to be updated daily. It includes fastidious information.

  73. #73

    Very nice post. I just stumbled upon your blog and
    wanted to say that I have really enjoyed browsing your blog posts.
    After all I will be subscribing to your feed
    and I hope you write again very soon!

    free robux2周前 (10-16)回复
  74. #74

    I always used to study paragraph in news papers but now
    as I am a user of internet so from now I am using net for posts, thanks to web.

    free robux2周前 (10-16)回复
  75. #75

    Thanks for any other informative site. The place else may just
    I get that kind of info written in such a perfect
    manner? I have a mission that I’m simply now operating on, and I
    have been at the glance out for such info.

    free robux codes2周前 (10-16)回复
  76. #76

    Your mode of explaining all in this post is really fastidious,
    every one can effortlessly be aware of it, Thanks a lot.

    brawl stars hack2周前 (10-17)回复
  77. #77

    Hi! I’ve been following your website for a while now and finally got the bravery to go ahead and
    give you a shout out from Austin Texas! Just wanted to mention keep up the fantastic job!

  78. #78

    Does your website have a contact page? I’m having a tough time locating it but, I’d like to send you
    an e-mail. I’ve got some recommendations for your blog you might be interested in hearing.
    Either way, great website and I look forward to seeing it develop over time.

    free robux2周前 (10-19)回复
  79. #79

    I am really happy to glance at this web site posts which carries
    lots of useful data, thanks for providing such statistics.

  80. #80

    You’ve made some decent points there. I checked on the net for more info about the issue and found most people will go along with your
    views on this web site.

    free vbucks2周前 (10-19)回复
  81. #81

    This website was… how do I say it? Relevant!!
    Finally I have found something that helped me. Thank you!

  82. #82

    Hello there! Quick question that’s completely off topic.
    Do you know how to make your site mobile friendly?
    My weblog looks weird when browsing from my apple iphone.
    I’m trying to find a theme or plugin that might be able
    to resolve this problem. If you have any suggestions, please share.
    Cheers!

  83. #83

    Hey there! This is my 1st comment here so I just wanted to give a quick
    shout out and say I truly enjoy reading through your articles.
    Can you recommend any other blogs/websites/forums that deal with the same topics?
    Thanks for your time!

欢迎您的光临 我们一直在努力

加入Q群联系博主