wide distribution networks banking system after an upgrade, 12 cardholders in
Beijing, Shanghai and other places have suffered a similar online banking theft.
Bind phone number are criminals to modify their online receive dynamic
verification code The senior hackers, this series of cases shows that the wide
distribution networks banking system may there is a big loophole. Reporter
survey found that compared with other online banking set up, and wide
distribution networks silver customer information is more likely to be someone
else to modify.
reporter was informed that morning, some of the stolen brush cardholders are
required to sign a GF staff, said the move does not mean that the bank there is
no fault.
fraudulent crime
wake up fraudulent credit card charges
Mr Yip told reporters that he used before going to sleep handle organ.
on the morning of July 4, Mr. Ye wake up turn on the phone, and five from the
Guangdong Development Bank Customer Service 95508 SMS let him surprised.
SMS to his credit card $ 2000. The second is the Behind the three content of
the message,
SMS are the hair on one or two o'clock at night, fast asleep, and credit card
is stolen brush.
Mr Yip, the Guangdong Development Bank system upgrade May 20 after the bank
payment no longer use a password, replaced by mobile phone dynamic verification
code. Customers consumption of 100 yuan each, bound phone number will receive a
dynamic verification code to confirm online.
Mr Yip said: sent to the phone number on a 138 at the beginning of the
Beijing No, Mr Yip in front of the reporter's call, but unable to connect.
QQ rights of 12 people have been similar fraudulent
in the process of
negotiations with the Guangdong Development Bank, the Mr Yip found a wide
issuing stolen brush composed of QQ group. Group 11 has exactly the same and his
experience, we are in wide distribution networks banking system upgrade soon,
re-fill in personal information stolen brush. They come from Beijing, Shanghai,
Guangdong, Zhejiang and other provinces and cities, preliminary statistics, the
total amount of 500 million yuan stolen brush.
through communication, we found that their cards are stolen on a third-party
payment platform of e-commerce Co., Ltd. in Shanghai IPS brush, the stolen funds
have been transferred to Teng Chi planning company.
12 people, except for Mr Yip's phone dynamic verification code was modified
to 138 at the beginning of the phone number, the number of the rest have all
been revised to 159 at the beginning of the specific numbers, and the Beijing
number.
by IPS, the reporter get a Tang Chi planning the company's statement, saying
it is also a victim of fraud by a member, has been unable to contact them, their
accounts be frozen.
wrong card bank statement cited dissatisfaction
Mr Yip said,oakley
sunglasses for sale, when they reflect the situation to the Guangdong
Development Bank, their call center staff said, online credit card stolen brush
is likely to be the customer's own disclosure of personal information and
password, or acquaintances to steal information, or on a phishing site or Trojan
when this argument of the cardholders have expressed dissatisfaction.
total bank said the stolen brush the responsibility of us, we did not keep
the password, do not GF a bit of responsibility, does not it? He told reporters
that 360 security guards, online shopping, bodyguards and other anti-virus
software installed on his computer, he is very aware of the regularly updated,
computer alarm never said Trojan. Online shopping for six years, ICBC, China
Merchants Bank, Bank of the bank's online banking have, and have used the last
two months, even if the computer is a trojan, why else online banking is all
right, only wide-issuing stolen brush ?
questioned vulnerability
response upgrade to improve data theft
Mr Yip told reporters in early May this year, Guangdong Development Bank
through SMS, announcement inform the cardholder in the form of the line online
banking will be held May 20, suspended from 23 pm to 12:00 the next day service,
a comprehensive upgrade,louis vuitton
sale, before the request to fill in the incomplete data,replica rolex, cardholder perfect
the contents of the three verification code.
7 2
, Mr Yip online banking login, the personal information of the tail number
4497, the credit card had a So inch, 'perfect' card two days after the stolen
brush. The other victims also have and Mr Yip a similar experience.
a vulnerability personal information easy to leak
the senior hacker fish master site system (a pseudonym), brush cardholder
reflected from the stolen their personal information the possibility of hackers
using the Trojans or phishing sites to steal. But he also pointed out that this
also shows that the wide distribution networks silver loopholes.
fish said, encountered the same reason, but many people in the same time
fraud, bank online banking vulnerabilities may be more obvious, serious. which
hackers discovered and advantage of the loophole. fish for further analysis,
this series of case actually exposed to the GF online banking system to modify
the binding of the mobile phone number, a security risk, because it does not as
good as the other banks set a reasonable, safe.
reporters surveyed banks U shield up
just received readers broke the news, the reporter immediately call the GF
customer service, asking how to modify the phone number to receive dynamic
verification code. Other reply to the counter, you can also log in directly to
the wide distribution networks of silver modified.
specific in two ways: set before the Verification message is sent to the new
phone number, enter the verification message will then be re-fill in the
information, the phone number is successfully modified, the original cell phone
number will no longer receive authentication information.
fish, this set looks like security, but once the system loopholes to be
hacked, customer information is stolen, the so-called role.
Mr Yip suspected criminals is
reporters since the investigation a number of banks found that most of the
bank's online banking ukey (a directly connected to the computer via a USB
storage devices with password authentication function, such as ICBC U shield) as
a security protection.
China Merchants Bank also uses a dynamic verification code, but its customer
service, change to verify the phone number can not be online banking, can only
be modified at the counter.
the latest progress
update the settings to record phone then remind
reporters recently the official website login wide Portal Silver found that
online banking has launched a new set of security mode. The online banking
customer service told reporters that the security level of the original system
is not enough, and have modified some of the security content.
under the new system, want to modify the phone number to receive dynamic
verification code, you must first fill in the online phone numbers,gucci shoes, online banking to the
number to send verification message, successfully receive and verify the content
on the Internet can fill in the correct number has changed for the new number.
The same time, the new web banking system have to login SMS alerts, online
banking login, the system automatically to record the phone to send a
notification SMS.
paid in advance to lose money the first to sign a confidentiality agreement
September 20, 2009, the number of victims told reporters that the the GF Bank
to respond to the problems they reflect, asking them to sign a
agreement attached to the terms of confidentiality requirements refund the
customer the
Reporter am informed that some people get a refund.
It is reported that GF Bank has set up a task force to investigate this since
the mass theft of.
cardholder Mr. Jiang told reporters that he found after a report in the
online banking theft, Dongcheng police criminal case, the police investigation.
GF Reply advance does not mean wrong
Yesterday afternoon, the reporter called the Guangdong Development Bank
Public Affairs Department asked the matter, the taker to give a reply later.
Subsequently, a female staff member call back, will make a written reply in the
evening. As of press time reporter morning, a written reply not yet received.
Reporter once again call the relevant departments, the
representations in an interview yesterday, the female staff member mentioned
that although the banks have paid in advance on the part of victims Set
cardholder rare compensation
lawyers say
online banking theft
It is reported that the court in Beijing, there is no online banking theft
Bank be liable for compensation of the precedent .
Court generally agreed that the hacker by a Trojan stealing depositors
personal information belonging to Depositors, such as can not provide evidence
that the bank there is no fault, the bank is not responsible.
Beijing dual interest law firm, Liu Lin,christian louboutin shoes,
professional competence, so that depositors and lawyers to prove that the online
banking system is vulnerable, simply can not do. Many lawyers also expressed a
similar view.
stolen off-site to apply to a report
Liu Lin encountered the theft of online banking, cardholder should be
reported for the first time, and then negotiating with banks.
Liu Lin told reporters, according to public security jointly issued a
Cardholders can report credit card to apply for the public security organs. Card
cardholders in Beijing, foreign criminals in online fraud can report in Beijing.
text / reporter to pay the intern Goal Orientation
share: Welcome to the comment I want to hot microblogging today
microblogging Recommend |