The user cleaned up “zombie” friends with one click, and the criminal gang got 7.12 million citizen information

　　Want to quickly clean up "zombie" friends in WeChat?

"Time-saving and convenient, one-click powder cleaning software can help you achieve it for free!"

　　Seeing such an advertisement, many people will click in to find out, and more than 7.12 million pieces of citizen information will be leaked.

　　On December 7, a public prosecution by the People's Procuratorate of Minhang District, Shanghai, Duan Mouzhang and Zhou Mouzhong, infringing on citizens' personal information, opened a public trial.

Clean up "zombie" accounts in WeChat friends for free?

　　A reporter from The Paper (www.thepaper.cn) learned from the procuratorial organ that Li Hai (a pseudonym) is a Taobao shop owner who usually cleans fans for a fee.

At the beginning of 2020, someone sent a private message online that he could provide free powder cleaning software.

Li Hai was tempted, so he used the account password sent by the other party and directly logged in to the website of the clean fan software.

　　Li Hai noticed that there was a button to retrieve the card password on the website. After clicking it, a card password consisting of English letters and numbers was generated. Then Li Hai sold the card password at a Taobao store for 2.5 yuan.

　　Faced with a customer who wants to buy a fan cleaning software, Li Hai will ask the other party to pay for the "card password" at his store first.

After that, the customer can open the platform of the Clean Fan website and enter the "card password" into the corresponding position. The platform interface will pop up a QR code that the customer authorizes to log in to WeChat. After the customer scans the code and clicks to agree, the software server will be Automatically log in to the customer’s WeChat, start the cleaning program, and then send the test results to the WeChat user’s mobile phone.

According to the information prompt, customers can see the number of hacked and deleted by their friends, and choose to clean up or not to clean up by themselves.

　　However, what Li Hai and a large number of software users do not know is that their WeChat nickname, avatar, mobile phone number and other personal information have been stolen from the moment they clicked to complete the WeChat authorization and uploaded to a criminal gang’s On the server.

　　And all this was done under the "collusion" of Duan Mouzhang, Zhou Mozhong, Wang Mo and Chen Mofei (handled in another case).

"One-click" to steal more than 7.12 million pieces of information

　　At the end of 2019, Duan Mouzhang, Wang Mou and Chen Moufei discussed in advance and recruited technician Zhou Mouzhong to jointly develop a program that can realize the batch "cleaning powder" function.

　　After completing the goal setting, they made a clear division of labor.

Duan is responsible for the front-end program; Zhou is the backend of the powder cleaning software and saves user information data under the requirements of Duan.

As a result, the WeChat powder cleaning software was officially launched.

　　But Duan and others did not stop there.

They not only used the cleansing program to illegally obtain citizen information, but also sold and used the illegally obtained citizen information to further profit.

　　Duan and others illegally obtained a large amount of WeChat authorization and personal information through the promotion of powder cleaning software and uploaded it to the server; Wang and Chen provided the illegally obtained WeChat authorization to others for use, and used these real WeChat accounts Associate with other apps to automatically like and follow in batches to jointly seek illegal benefits.

　　In order to maximize the benefits, Duan Mouzhang also promoted the powder cleaning software free of charge, and developed a large number of agents and users, so as to obtain the large amount of WeChat account information needed.

　　In less than two years, the daily activity of users using the software has reached nearly 10,000.

After appraisal, more than 7.12 million personal information records were found in the server of the purifier software involved in the case.

　　The Minhang District Procuratorate charged that the defendants Duan Mouzhang and Zhou Mouzhong violated relevant state regulations and illegally obtained citizens' personal information. The circumstances were particularly serious and their behavior was suspected of infringing on citizens' personal information.

　　On December 7, the court stated that it would choose a date to make a judgment.