The Virus Group Is Eyeing Online Shopping: 2010 More Than 100 Million Users Have Encountered Security Threats.

The proliferation of Internet fraud has made the Internet full of minefields. hacker The target is directly placed on users. network "Wallet"

"Yesterday morning TaoBao 54 thousand and 600 yuan has been defrauded, and the Beijing police are paying attention to it. Recently, the complaints of thousands of veteran Internet users in their micro-blog attracted a lot of attention. In just a few hours, the micro-blog was forwarded thousands of times.

According to the introduction of a thousand birds on the Internet, the whole process of being cheated is almost unnoticeable. "Things had to go back to last night to buy stamps on Taobao, and find the target goods through search." then customer service replied, "add our boss, we need more, and the price is fixed." I added the QQ boss to 442165303, and I had a good chat after a while. Later, I asked for a physical map to see, the other party issued a RAR compression package. After decompression, it was a document similar to a picture, so I ordered it and later I made a mistake.

Reporters combed the process of a thousand birds cheated: search into the cheater shop - plus the other QQ number to communicate - receive the other side sent compressed files (virus) - open, recruit - continue trading - online banking payment is successful, but Alipay page display error.

"This is the new fraud trojan in 2010 - online shopping Trojan horse." Jinshan network security expert Li Tiejun introduced.

Virus spanformation

According to the new statistical data of Jinshan network security center, the online shopping Trojan has been growing rapidly in 2010, and the number of variants is over 10000. In the first 2 months of 2011, nearly 3000 new variants were added each month, and the online shopping users who had been fraudulent increased.

Corresponding to the rapid growth of online shopping Trojan horses, the total number of virus samples has declined. According to the "2010-2011 China Internet Security Research Report" released by the Internet security vendor Kingsoft network (hereinafter referred to as the "report"), 17 million 980 thousand new Trojan horses were added in 2010, a slight decrease compared with 2009, which is the first time that the total number of virus samples has slipped for many years.

Is it a blessing or a curse to reduce the number of Trojan horses? Li Tiejun said that in 2010, security software successfully controlled the webpage hanging horse, resulting in the sharp decline of virus Trojan horse. However, the virus group did not stop there, but began to seek strategic spanformation. Online shopping fraud and cell phone short message phishing gradually became the key target of the virus group. The number of Trojan horses on the surface is all relaxed, but the proliferation of Internet fraud has made the Internet full of "minefields" and hacker targets are directly placed on the user's network "wallet".

According to statistics from the cloud website identification system of Jinshan network security center, in 2010 1~10, the average daily number of online phishing websites related to online shopping was about 1500.

Li Tiejun introduced that phishing, which seems to have a low technology content, has caused more and more online shoppers to suffer. The reason is that the fishing website is simple to make, with little investment and quick results. At the same time, the recognition of phishing sites by traditional security software is not timely and accurate.

Data show that in 2010, nearly 28% of Internet users experienced false attacks on phishing sites, fraudulent spanactions, spanaction hijacking, Internet banking theft and other targeted attacks against online shopping. According to the security threat monitoring and statistics of Jinshan network security center, more than 100 million users have encountered at least one security threat against online shopping in 2010. The direct economic loss will exceed 15 billion yuan, and the per capita economic loss of online shopping users will rise from 80 yuan in 2009 to around 150 yuan.

With the development of mobile Internet, viruses are spreading from computers to mobile phones. According to data provided by China Mobile, 5% of mobile phones have been infected with malware. A virus called "SMS curse" has reduced the rate of mobile short message connection by 5%. The data also show that the mobile phone virus industry chain generates 1 billion yuan of gray income every year. According to a report released by the Chinese Academy of Sciences Psychological Research Institute, 68.6% of mobile phone users are facing the threat of mobile security.

Amazing industrial chain

Many people have such questions: who is studying and releasing the virus?

There are such a group of people on the Internet who do not belong to a company but operate according to the company's process. They do not need to work every day, but they can get substantial returns. They are what we often call the Internet "black industry" - virus group. The so-called virus group refers to the "black institution" that makes illegal Trojan horses by making and spreading viruses and Trojan horses.

With the increasing number of Internet users, Internet shopping, online games and other Internet applications have deepened, and the output value of the black industry chain has exceeded 10 billion.

Li Tiejun revealed that there are no more than 30 active virus groups on the Internet at present, while most of the virus spanmission channels are only controlled in the hands of very few large virus groups: the Huang tigers group, HYC group, HY group, old snake group, 192 group and so on, among which the competition among the virus groups is very fierce, such as the Zhang Feng group, ranking fourth in 2009, and now it has fallen to eighth. The top five virus groups accounted for 60% of all viral group spanmission channels. The report also shows that the spanmission channel of the 80% virus is controlled by ten major virus groups in the country. The virus groups get huge illegal gains, and the viral group gains hundreds of millions of yuan a year.

Before the online shopping fraud, the virus spread by the virus group mainly includes pop-up ads, shortcuts to create shopping websites on the desktop, promotion of fishing fraud websites, and tampering with home pages, etc. seven ways.

To tamper with the user browser home page as an example, Mr. Wang, director of a navigation website, revealed that the website navigation station was highly competitive, and some bad websites directly used the virus to promote traffic. After poisoning, the virus will be tampered with locking the browser's home page, and the common method can not be repaired. Every successful lock of a homepage can earn about 1 yuan. Installation and activation of a software will earn about 1 yuan, and successfully guide users to register the game ID, and also get the corresponding return. When the browser home page is locked to the navigation station, the navigation website can earn money through advertisements. At the same time, virus locked navigation stations can bring traffic to e-commerce websites, and may also modify navigation links at any time, and introduce Internet users to fishing fraud websites.

Mr. Wang calculated an account. Every time a virus trojan has successfully infected a computer, the virus promoters can get about 2 yuan in return immediately. According to the traffic generated by the success of the virus, each thousand IP gains about 6 yuan. According to the statistical results of Jinshan cloud security system, the main virus groups can infect about 200 thousand PC per day, with only one traffic income, which can earn about 200 million yuan a year. And traffic income is only part of the income of the virus industry chain.

Antivirus software is not working properly.

On Sina and Tencent micro-blog, you can see the case of online shopping Trojan fraud every day. However, what puzzles us is that these users have basically installed free antivirus software, but the Trojan horse's virus is still successfully bypassing the defense of the security software, so that it can run successfully and spanfer the funds of consumers to the designated accounts of Trojan horses.

Last year, a number of anti virus software was launched on the ground of free anti-virus software, and some antivirus software was also free. According to the third party statistics, free antivirus software has become a mainstream by more than 90%. The question is: why is the virus group still flooded with free security software almost every computer?

Internet watchers say that free antivirus service is just a promotional tool to attract popularity, and anti-virus software companies launch Internet value-added business on the basis of these businesses to make money. "Free antivirus has become a means to get other benefits." He said.

"Some companies spend money on speculation rather than research and development. They forget that technology and integrity are the foundation of a real industry. Their development has completely deviated from the main channel of the development of the industry. The hacker Trojan group will also watch the fire and take advantage of it. One industry insider pointed out.