What do you mean by receiving the verification code?

This is a new type of fraud. According to the police in Yuexiu, Guangzhou, scammers can obtain the short message content of users' mobile phones in real time through "GSM hijacking+SMS sniffing technology", and then use the technical loopholes and defects of well-known banks, websites and mobile payment apps to achieve crimes such as information theft, fund theft and online fraud.

Guangzhou police have cracked many such cases in succession. It is reported that most criminal gangs choose to commit crimes in the early hours of the morning without direct contact with the victims, so most victims cannot detect the theft of funds in time.

"The principle of this attack ('GSM hijacking+SMS sniffing technology') is because GSM SMS is not encrypted, so criminals can monitor the content of SMS through some eavesdropping means." Huang Lin, a senior researcher at 360 Radio Security Research Institute, explained the specific steps of criminals in an interview with Nanfang Daily reporter.

"The attacker only heard short messages, but it was useless. SMS verification code needs to cooperate with the verification process of website or APP to play a role. Therefore, the attacker must know the target's mobile phone number, and may also need other information, such as ID number and bank account number. In fact, this information can be obtained by' crashing into the library' or invading the accounts of certain applications. "

Extended data

solution

"To realize the attack of GSM hijacking+SMS sniffing technology will make the mobile phone's' movement' relatively large, which is why most criminals choose to commit crimes in the middle of the night. "Tencent security technicians said in an interview with Nanfang Daily that as an ordinary netizen, the simplest move is to turn off the phone before going to bed.

"There is no signal after the phone is turned off, and the SMS sniffing device can't get your phone number. If you find that your mobile phone has received a verification code of unknown origin, indicating that criminals may be crashing into the library at the moment or using some loopholes to determine your information, you can immediately turn off the phone or turn on the flight mode, and move the location (maybe hundreds of meters in a big city) to escape from the coverage of the equipment.

In addition, pay attention to the change of your cell phone signal mode. Tencent security technicians said that in a stable 4G network environment, when the mobile phone signal suddenly drops "GSM" or "G" or there is no signal, we should be alert to the forced "frequency reduction" and GSM Hack attacks carried out by hackers, change the network environment in time, reconnect the real base station, and check the abnormal malicious operation of the mobile APP.

People's Daily Online-The mobile phone receives a strange verification code, and a new type of network theft strikes.