An App pays 29 yuan to check where the data of used car maintenance records come from?
Not long ago, an App called "Master Amoy" was popular in the used car market. This App has magical functions-as long as you pay 29 yuan, you can query the maintenance records, accident history, last mileage and restore the most authentic records of vehicles.
This information is especially important for many used car dealers in the market. When deciding whether to buy this second-hand car, it depends on whether there is something wrong with the car, such as whether it has been flooded, burned, and had an accident. These safety hazards will become important factors to consider.
As a result, this App quickly caught fire in the circle. But few people have thought about where these car data come from.
On May 17, 2017, the person in charge of an automobile 4S shop in Yancheng City, Jiangsu Province reported that they found that the account login of DMS system used by Gao, the after-sales supervisor in the store, was abnormal. In recent days, this account will query the relevant data of different vehicles for more than 500 times every day, which obviously exceeds the normal workload of 4S stores.
The so-called DMS system is an internal operating system used by automobile dealers to register and upload vehicle maintenance records and find relevant information such as vehicle owners. As long as you enter the frame number in the system, you can query the relevant data of each car of the car brand nationwide.
After the police searched, they found that a USB flash drive was inserted behind the computer host used by Gao, an employee of the 4S shop, and there were abnormal programs running in it.
After analysis by the Judicial Appraisal Center, it is found that there is a program customized for the DMS system of 4S shop in the U disk. This program can query the owner’s name, license plate number, frame number, maintenance information and other related information in the system, which is actually a plug-in program.
With the deepening of the investigation, the police found that this was not a case, but a criminal gang specializing in illegally obtaining automobile data and information. On October 27th, the Ministry of Public Security listed the case for supervision.
The police investigating the case said that through the review, the suspect Gao was an "inner ghost" who sold vehicle data information. According to his account, in March 2017, Ma, an employee of a company in Shenzhen, went to the 4S shop and contacted him privately. Both parties agreed that Gao would provide Ma with the account number and password of DMS system in order to obtain vehicle data, and the company would pay Gao a monthly fee.
It is understood that as long as you can browse the DMS system of 4S stores, you can not only illegally obtain owner information, but also obtain a lot of vehicle information. These data include vehicle accident records, maintenance records, maintenance records, replacement of spare parts records, vehicle mileage and so on.
The police investigating the case said that during the investigation of the case, three core data servers and 21 computer hard disks were seized at the scene. The appraisal results of the appraisal agency showed that the criminal gang obtained relevant data involving 32 automobile brands and more than 1.55 million vehicles.
According to the criminal suspects, they privately agreed with a number of 4S shop employees that the 4S shop employees would provide their account numbers and passwords, and the companies involved paid the fees on a monthly basis, with a cumulative payment of more than 500,000 yuan to the 4S shop employees, and the most people made illegal profits of more than 50,000 yuan.
According to the police investigating the case, the company involved in the case is engaged in the evaluation of the condition of used cars offline, and they need relevant data of vehicles. Initially, they bought data from other companies. Because of the high cost, it took a long time to get the data. Some shareholders proposed to develop software programs and obtain relevant data from 4S stores through technical means.
The company used the illegally obtained data on the repair and maintenance of various brands of vehicles to research and develop the "Taobao Master" App query platform, and then provided this platform for others and units to use for profit. In addition, they also sell the illegally obtained car data to other used car evaluation and acquisition platforms, and charge them at the contract price.
The police found that the case belongs to a new type of "black production" crime on the Internet operated by companies, with a high level of criminal technology. Compared with traditional crimes, internet crimes have the advantages of low cost, easy implementation and low risk, and are not easy to be found.
Most activities of Internet crimes are carried out on the Internet platform, and the suspects only need to operate on a computer connected to the Internet. Cybercrime is only an instant electronic data transmission, which is easy to modify and delete and highly virtual.
According to the police investigating the case, the internal information system security management of many vehicle production and sales enterprises involved in the case is chaotic, and there are not many corresponding security measures taken by enterprises, and some employees are not aware of the confidentiality of vehicle information and other data.
Some Internet companies have a weak legal awareness, and unilaterally think that the new field is a gray area, and they will do whatever it takes to obtain data. Some automobile production and sales enterprises have loopholes in internal automobile information management, failed to take effective preventive measures, and even colluded internally and externally to illegally transmit citizens’ personal information.
The police found that vehicle transactions in the used car market generally need vehicle-related data to support them, but the acquisition of vehicle data is often "opaque and irregular", which also provides favorable conditions for Internet crimes. (Reporter Li Chao correspondent Zhang Tianpeng Cao Lei)