What happened after three people received the message "Your Home" and clicked?

A mobile phone Trojan virus, involving a series of major cases. Under the command of Shandong Provincial Public Security Department, the police of Heze City and Cao Xian County jointly attacked, moved to 9 provinces and cities within 10 month, and arrested 73 suspects. On May 17, the reporter walked into Heze City Public Security Bureau and listened to the story behind the case told by the police participating in the war.

Click the message, 160000 is gone.

The case started with a text message.

2065438+August, 2006 1 day, Netan Brigade of Heze Cao County Public Security Bureau received an alarm from local residents Li Mou, Yang Momin and Li Mokun, all claiming that the bank card bound to the mobile phone was stolen in different places. After detailed inquiry, Cao County police found that all three victims had received a short message with a link.

The text message said, "Your family, have a good look at the video at that time." "Your home" means "your lover" in the local dialect. After clicking on the link, the three of them found that the bank card bound by the mobile phone was stolen from different places, totaling more than 270,000 yuan.

In this case, the victim Li suffered the most serious loss. It was stolen by the criminal suspect 1.6 million yuan. Fortunately, Li reported the case in time. After careful investigation, the police found that Li's stolen funds had a transaction record in Dalian, and the suspect bought 22 Apple mobile phones on a local third-party payment platform. The network police quickly started the "emergency payment stop" and recovered 124760 yuan.

After receiving the alarm, Cao county police, after preliminary analysis, felt that the case was serious, so they immediately reported it to the Netan detachment of Heze City Public Security Bureau. The network security detachment of Heze Municipal Bureau analyzed the samples of Trojan virus in three cases and found that the samples of Trojan virus were completely consistent with the return address. The Netan Detachment of Heze Municipal Bureau and Cao Xian Public Security Bureau deployed elite police force to form a joint task force to investigate the above three cases.

Stealing personal information with a Trojan horse.

According to the analysis of the network security detachment of Heze Municipal Bureau, the receiving mailbox and sending mailbox of Trojan link found in these three cases are the same, and the mobile phone number of Trojan bound to receive information is also very fixed. It was determined that the three cases were committed by the same criminal gang, and their crime locations were all in Binyang, Guangxi.

2065438+06161On October 23rd, Heze police launched the first network-closing operation, busted a fraud gang and arrested four suspects, including Lu Mouqiu, Lu, Lu Molan and Ling.

Upon examination, the trojans implanted by the criminal suspects Lu Mouqiu and Lu et al. into the victim's mobile phone were rented from a friend Lan, and the price was 1000 yuan-1200 yuan per week. Phone cards beginning with 17 1 and 170 were also purchased online.

Subsequently, Lu Mouqiu and Lu sent these short message themes with mobile phone virus links to victims Li, Yang Momin and Li Mokun in Heze City. The victim clicked on the link out of curiosity and other psychology, and the address book and historical short message in the victim's mobile phone were sent to the reply mailbox set by Lu Mouqiu in advance in Ma.

Lu Mouqiu logged into the mailbox, copied and pasted the obtained address book into a text, and screened out the victim's name, telephone number, bank card number and other information. (Lu Mouqiu contacted online to buy missing information).

Lu Mouqiu and others use personal key information to register accounts on third-party platforms, shop on game platforms, recharge mobile phone bills or purchase point cards, implant "interception horses" on the victim's mobile phones in advance, obtain SMS verification codes, and complete the whole transaction.

The money that criminal suspects swindle online is mainly used to buy game cards, recharge cards or transfer money to third-party payment platforms. They don't realize cash directly, but through an extremely complicated transfer process, or contact a special "money launderer" online to launder money and sell stolen goods online. Since February 24, 20 17, the task force has continuously organized nationwide arrests. By the end of April, it had successively moved to Yunnan, Guangdong, Sichuan, Jiangsu, Shanghai, Anhui, Hebei, Henan, Guizhou and other places, with a cumulative journey of tens of thousands of kilometers, successfully destroying 2/kloc-0 gangs that made trojans and infringed citizens' personal information, and arresting criminals.