6.05 billion and save personal information exposure: 5 Yuan to buy hundreds of online banking-personal information-IT information

Five dollars can buy a network of 100 Silver four pieces of information, including user name, account number, password, telephone number, personal information online "selling" becomes an inevitable part of online fraud. Over the weekend, sky white hat meeting, held in Shenzhen, the sky platform release of the 2016 site analysis report on disclosure of personal information (hereinafter the report) according to 2016 the sky platform includes Web site vulnerabilities can lead to the disclosure of personal information was 359, a total of 6.05 billion possible disclosure of personal information. Information security experts said that once identified as being misused, is likely to cause significant harm to user information security.

A single vulnerability greatly increased

According to the data of the report, this 359 site vulnerabilities can lead to disclosure of personal information, a total of 6.05 billion possible disclosure of personal information, up 9.4% from 2015 to 5.53 billion; the average personal information disclosure vulnerability could lead to 16.85 million, 2015, compared with 3.92 million/vulnerabilities increased by almost three times, a single vulnerability greatly increases. Also, data displayed, in 359 a may leaked personal information of website vulnerability in the: about 25.3% of website vulnerability may leaked user of account password information, may leaked account password number about 610 million article; about 58.5% of website vulnerability may leak user of real name information, may leaked real name information number up to 4.23 billion article; about 62.4% of website vulnerability may leaked user of behavior records, may leaked user behavior records information 4.01 billion article.

Five dollars more than 100 information 80% effective

It is understood that sky White Cap Conference hosted by Sky vulnerability response platform, bringing together domestic and foreign well-known white hat, top technical elite, security enthusiasts, and domestic well-known enterprises network security manager, CISO, including 360 Internet security, hacker one, Lenovo SRC over more than 30 companies and institutions were represented.

According to 360-seat anti-fraud expert Pei Zhiyong introduced under the 360 company information monitoring show currently reselling online for personal information is still rampant, with a single type of personal information is very cheap, five dollars can buy 100 of four pieces of online banking, including user name, account number, password, phone, etc. Five dollars on the Internet 100, once validated and found 80% above are valid. Current portfolio information is more expensive, but 700 bucks you can buy all sorts of information, other than four, including home addresses, relatives, on the net, where open records and take flight.

Pei Zhiyong said, because it is not a single source of information, but the combination of multiple sources of information, so the success rate is not very high, so this kind of information is more expensive, sold hundreds of thousands of Yuan.

60.5亿条个人信息存泄露风险：5元可买百条网银信息 - 个人信息 - IT资讯

五块钱可以买一百条的网银四大件信息，包括用户姓名、账号、密码、电话等，网上个人信息“贱卖”成为网络诈骗的一个必经的环节。上周末，在深圳召开的补天白帽大会上，补天平台发布的《2016年网站泄漏个人信息形势分析报告》（以下简称《报告》）的数据显示，2016年补天平台共收录了可以导致个人信息泄露的网站漏洞359个，总计可能泄露个人信息60.5亿条。信息安全专家表示，一旦被不法分子利用，极有可能对用户信息安全造成重大危害。

单个漏洞的危害大大增加

《报告》数据显示，这359个可导致个人信息泄露的网站漏洞，总计可能泄露个人信息60.5亿条，比2015年的55.3亿条增长了9.4%；平均每个漏洞可导致1685万条个人信息泄露，相比2015年的392万条/漏洞增加了近三倍，可见单个漏洞的危害大大增加。此外，数据显示，在359个可能泄露个人信息的网站漏洞中：约25.3%的网站漏洞可能泄露用户的账号密码信息，可能泄露账号密码数量约6.1亿条；约58.5%的网站漏洞可能泄漏用户的实名信息，可能泄露实名信息数量多达42.3亿条；约62.4%的网站漏洞可能泄露用户的行为记录，可能泄露用户行为记录信息40.1亿条。

五块钱一百条的信息80%以上有效

据悉，补天白帽大会由补天漏洞响应平台主办，汇集了国内外顶级的知名白帽、技术精英、安全爱好者，以及国内网络安全主管机构、知名企业CISO等，包括360互联网安全中心、hacker one、 联想SRC等30多家企业和机构均派出代表参加。

据360首席反诈骗专家裴智勇介绍，根据360公司监测的信息显示，目前网上对于个人信息倒卖还是比较猖狂，其中单种类型的个人信息很便宜，五块钱可以买一百条的网银四大件，包括用户姓名、账号、密码、电话等。在网上五块钱一百条，经过验证后，发现80%以上都是有效的。而目前组合信息比较贵，但七百块钱可以把各种各样的信息都买全了，除了四大件之外，包括家庭住址、亲友关系、上了什么网、在哪有开房记录，以及搭乘过什么航班等。

裴智勇透露，因为不是一个单一的信息来源，而是多个信息来源组合出来的，因此成功率不一定很高，所以这种信息比较贵，卖到几百元和上千元。