Like someone inexplicably, strange shops appear in favorites, log in to send advertisements in different places...
Who moved my social account
Our reporter Yan Zhihong and Wu Huiying
"My Weibo account automatically followed me more than 20 people inexplicably today" "I haven't used Weibo for a year, how come there are more than 50 people I haven't followed"... Recently, a large number of netizens reported their Weibo accounts Suspected of being "manipulated."
The reporter found that in addition to liking or adding attention to people they don’t know on Weibo, many netizens also encountered "spiritual events" such as strange products and shops appearing in Taobao's collection, and WeChat accounts repeatedly prompting remote logins.
Is the personal account stolen?
Or did the shop use the means?
Or is it that the Internet gangsters are playing tricks?
Reporters conducted an investigation.
"Damn" my account
Personal social platforms and online shopping platforms are suspected of being "controlled" by others. Have you ever encountered such "spiritual" incidents?
Many netizens reported that their Sina Weibo accounts would always give people likes for no reason, and they also followed a number of marketing accounts; the collection shop interface of their personal Taobao accounts would also collect some strange shops inexplicably.
What is even more annoying is that after unfollowing or bookmarking, new followers or bookmarks will appear after some time.
"My Weibo account automatically followed me more than 20 people for no apparent reason today" "Why does my Weibo always follow people I haven't followed recently" "I haven't used Weibo in a year, how come there are more than 50 people? People who have followed"... Recently, when searching on Sina Weibo, the reporter found that a large number of netizens reported that their accounts were abnormal.
Some netizens stated that they hadn't logged in for a few months, and the number of followers increased from more than 70 to more than 550. They also liked a lot of Weibo content.
This type of situation has appeared several years ago.
In 2017, a netizen named "OYE-Wang" posted content, "My Weibo has always been inexplicably giving people likes, I haven't read these Weibo. Give me automatic attention. Some shopping promotion accounts. Did Weibo use black technology or I was poisoned?"
At that time, the netizen’s experience was re-commented and praised by a large number of people. Some people claimed that they had also encountered a similar situation, even if they changed their password and set login protection.
On Sina Weibo, the topic "Sina Weibo is inexplicably following a lot of people you don't know" also appeared.
Not only Sina Weibo, a social platform, but also some online shopping platforms have similar abnormalities.
In the first half of 2019, after the reporter browsed women's clothing on the main page of Taobao, for two consecutive days, they would automatically follow some unknown stores in the "Favorite Stores" column.
Although some netizens continue to report related problems on social platforms and online shopping platforms on the Internet, the problems have not been resolved for a long time.
Some Internet celebrity bloggers specially publish videos to introduce how to deal with the "manipulation" of Weibo and Taobao accounts.
The reporter found that on social platforms such as Weibo, the objects of automatic follow and likes are mostly marketing accounts, celebrities and film and television accounts, and even some obscene and pornographic content; on online shopping platforms, the objects of automatic collection are some with little transaction volume. , A shop that hasn't been opened long.
Some netizens reported that Weibo likes and followings to a large extent reflect the attitude of the blogger on a certain aspect, and can even reflect a person's "three views".
Because of this, some users also prefer to use like content to trace the blogger’s personal “portrait”.
When an account likes or reposts a large amount of low-quality and pornographic content, it not only corrupts the user’s reputation, but also easily triggers the official Weibo control rules, resulting in bad consequences such as the account being blocked.
In addition, some WeChat users reported to reporters that “your account is logged in remotely” prompts appear on their WeChat accounts from time to time, and they will also send advertisements to their friends without their knowledge, or even pull unfamiliar users. Enter your own group chat to send ads.
"Sending ads to others has seriously affected my normal life and work, and I have been reminding me that my WeChat account is logged in remotely. I am worried whether my account has been stolen." A user said worriedly.
1,500 yuan for 10,000 Taobao fans
"If you want to see how popular a celebrity is, you will know the number of followers on his Weibo." This sentence was once regarded as the "truth" of the online social circle.
The number of Weibo followers represents the celebrity’s influence, which is directly linked to Ta’s ability to attract money.
In the past two years, some self-media will also release news such as "xx star fans breaking 100 million" and "the top three stars with fans".
The vast buyer's market has attracted some individuals and companies to buy likes and fans, and it has been repeatedly banned.
"Zombie fans" have become a thing of the past, but now they use "real traffic" as a gimmick and help buyers earn traffic by manipulating real accounts.
——From "zombie fans" to "real fans", some businesses provide such "likes and fans" service.
As early as 10 years ago, the media exposed the situation that "10,000 Weibo fans charge 50 yuan" and "Taobao found a Weibo fan shop: 1 yuan can buy 10 fans". Baidu Encyclopedia also appeared "weibo brushing". Unique labels such as "fan company" and "fan trading".
The reporter searched and found that many QQ groups carried out transactions under the banner of "sell Weibo accounts". Trading groups such as "Sina Weibo Small Account Wholesale", "Weibo Real-time Account Hot Review Accounts" and other transaction groups were dizzying. The number of people also ranges from 300 to 2,000.
After a reporter joins a trading group, the page will continue to pop up ads for increasing followers and likes, and various businesses such as comments, increasing followers, and likes are clearly marked with prices.
Some advertisements specifically specify "real people" to share, like, and comment, and the advertisement content clearly "microblogging fans, 10,000 fans 25 yuan".
—— "Buy traffic" for Taobao stores, and also allow users to "collect without feeling".
The reporter saw in Baidu search that some advertisements under the banner of "real traffic platform" are located at the top of the browsing page, claiming that the service content includes "increasing store traffic", "baby artificial collection and shopping cart" and so on.
The reporter entered a company’s webpage and stated in its introduction that “provide real traffic enhancement services for Taobao, Tmall, JD, Pinduoduo and other online stores.” “The company’s traffic is real and effective. Check buyer accounts one by one, as long as the real-name number is excluded. "Black Number" "one-stop traffic solution-Taobao traffic, JD traffic, Pinduoduo traffic, live broadcast tasks, Alibaba tasks, favorite treasures, favorite stores, additional purchases, like tasks, talent tasks", etc.
Subsequently, the reporter consulted with a seller under the name of the amount of attention the Taobao store needs to pay attention to.
The other party said that they can increase the attention of Taobao stores, the amount of likes for live broadcast popularity, and the amount of likes and purchases of products.
"If you are a fan of a Taobao store, the price for an additional 10,000 fans is 1,500 yuan." The other party said that the reporter only needs to send him a link to the store or product, and they are all "real fans", so there is no need to worry. The store was officially closed by Taobao.
In addition, the reporter found that there are some businesses that provide "targeted visit" promotion functions.
"Simply speaking, I will make a link for you. This link already contains the action of "collection and purchase" for a certain product or store. When you click the link, the system will automatically complete the "collection and purchase" "Operation." Insiders told reporters that after optimization, such an operation can be completed without the user's perception. This is why some people say, "The store or product that I have never browsed before appears in my collection. "In the folder" reason.
——You are thinking about cleaning up "zombie fans", but the Internet black and gray products have targeted your WeChat account.
The reporter learned that some WeChat users are eager to know "who has deleted themselves" in their friends list, so they ask for help from businesses that can "clean up zombie fans" in the online market.
In the process of "cleaning fans", businesses often require users to scan a QR code that can authorize them to log in to the user's WeChat, so as to obtain the user's remote login authority.
In this context, some illegal businesses, while completing the so-called "cleaning fans" task, also left "backdoors" in the user's WeChat account, so as to continue to "manipulate" the user account after the end of the service.
There are also some WeChat users who rashly listened to the bewilderment of criminals and “rented” their WeChat accounts to the QR code, payment QR code, or group QR code for others to use, in order to obtain small economic benefits.
The criminals took advantage of these users' "taking advantage" mentality to illegally take over or even directly steal users' WeChat accounts through technical means.
Be wary that WiFi is installed with a "bug"
Will increasing the number of browse collections of products or stores improve the ranking of my store?
Does Taobao allow traffic transactions?
Why does my account collect and purchase unfamiliar products and shops without knowing it?
The reporter asked Taobao officials by letter.
The Taobao team stated that "traffic trading" behavior is common in the Internet industry.
In web search and social software, users often purchase all kinds of junk traffic through Internet black and gray products, falsify their own traffic, and even use them for malicious traffic attacks.
For a long time, Taobao has forbidden any form of forgery, hijacking, and trading of malicious traffic, nor has it allowed the provision of such services.
In terms of product and store rankings, Taobao pays more attention to factors such as product quality, consumer service capabilities, and logistics efficiency that can effectively enhance consumers' shopping experience.
In addition, Taobao believes that there are two main reasons for the "unexplainable" collection of unfamiliar goods and shops on user accounts: First, some consumers rent out Taobao accounts for petty profits, and actively provide accounts to black and gray production gangs. Fake traffic; second, some black and gray production groups will hijack users' traffic.
"Whether it is a Weibo, WeChat or Taobao account, when there is a'singular phenomenon' such as'non-personal abnormal operation' for no reason, the account must be a security risk." General Manager of Shanghai Anshi Network Technology Co., Ltd., senior network security Expert Guo Yao analyzed that access to unauthorized malicious WiFi, traffic hijacking, malicious code attacks, Trojan horse viruses in mobile devices, and weak account passwords may cause such "spiritual phenomena" and personal accounts are used. The most common reason is that data is hijacked due to unauthorized malicious WiFi access.
The so-called malicious WiFi sniffing means that the attacker induces the victim to access the malicious WiFi by forging an unauthorized WiFi hotspot. Since WiFi is built by the attacker, it can obtain the information sent and received by the user when connecting to the WiFi. All the data packets.
"It's like someone installed a bug on the WiFi. As long as you connect to this WiFi, all communications between you and others will be monitored." Guo Yao said.
In addition to malicious attackers forging WiFi to attack, home WiFi, WiFi in some public places may also be compromised by criminals and "eavesdropped" due to insecure configurations and weak passwords. When using these WiFi to log in to social networking platforms or e-commerce platforms Account, the account password and other information may be controlled by others.
The criminals then hacked into user accounts and performed "ghost operations."
In addition, some users may also have security risks when they use "unknown brand wireless routers" purchased online.
"Internet black and gray production has formed a complete upstream and downstream industrial chain. Some brand-name routers may be installed with a'back door' before they leave the factory. Manufacturers will monitor users' data from a certain website according to their needs, so as to obtain users on a specific platform. Account control rights." Guo Yao said.
If the user does not use WiFi, is there a corresponding security risk?
A security engineer of a communications operator who did not want to be named told reporters that when using mobile data traffic to access network platforms, there is also the risk of eavesdropping.
"The data interaction between the user, the communication operator, and the network platform server will enable the user to see all kinds of content on the mobile phone," said the engineer. "The data sent and received from the operator is It is encrypted, but the data security protection inside the network platform server and between users is relatively weak, which leaves a good opportunity for criminals."
The engineer revealed that some network platforms will enter into partnerships with content distributors to reduce the network load of the main server and increase the network response speed, but this is equivalent to adding a barrier in the data interaction path between the user and the network platform server In order to achieve commercial purposes, some content distributors entrain "private goods" in the data they interact with users, so that users can perform certain operations without "perceiving". This is also a common method in traffic hijacking. .
Personal safety homework
In recent years, the state has continuously strengthened system construction at the level of personal information protection.
For example, the promulgation and implementation of the "Cyber Security Law" and the "Civil Code" put forward more detailed regulations on the protection of personal information, and a number of laws and regulations such as the "Personal Information Protection Law" and the "Data Security Law" are also ready to emerge.
At the same time, local public security departments have further strengthened their investigation and punishment efforts.
In 2019, the police in Nanjing and Nantong, Jiangsu investigated and dealt with two cases of using the dark web to infringe on citizens’ personal information, and seized tens of millions of citizens’ personal information; in December 2018, the Kaifeng police in Henan Province eliminated a criminal gang that infringed on citizens’ personal information and captured telecommunications. More than 80 "inside ghosts" such as operators, community officials, and logistics industry employees...
The interviewed experts believe that in daily work, users themselves must also have a certain level of network security.
"Don't lend your WeChat, Weibo, Taobao and other online platform accounts, and don't trust the so-called "green cleaning zombie fans" advertisements on the Internet." He Yanzhe, deputy director of the evaluation laboratory of the Trust Security Center of the China Electronics Standardization Institute, reminds users of these precautions Risk measures can not only guarantee the security of users' online platform accounts to a certain extent, but also prevent users from participating in illegal financial activities such as online money laundering without their knowledge.
At the same time, for mobile terminals such as mobile phones and personal computers, use professional anti-virus software to regularly kill viruses. Do not randomly click on links to unknown websites, let alone fill in your online platform account information on unfamiliar websites.
"In order to prevent forgetting the password, some users like to set the account and password of different network platforms to be the same, which also has certain security risks." He Yanzhe suggested that users can add some capital English letters or punctuation to the account and password settings of different network platforms Symbol, so that it is not easy to forget the password, and it can also increase the security of the password.
"Don't go'ceng' when you see the free WiFi, because it is very likely that criminals are'fishing'." Guo Yao reminded users who like to "crun the Internet" in public areas and try to use the mobile phone in public places as much as possible. Mobile data traffic, do not scan the code to download mobile phone applications with unknown security.
In addition, Guo Yao also suggested that consumers should choose brand products produced by regular manufacturers as much as possible when purchasing wireless routers, and use complex passwords as much as possible to improve spatial network security when installing and setting up routers.