In China, one of the largest systems of state monitoring of the population, practically not limited legally. However, the centralization of control over the data of millions of citizens led to their leakage to the black market. Here, insiders with access to these data sell them to everyone, including scammers and individuals who are ready to pay.
At the CyberWarcon conference in Arlington, SPYCLOD researchers presented the results of the analysis of the market for illegal data trafficking in China. They studied the activities of services working through Telegram, such as Carlnet, Dogesgk and X-Ray. These platforms offer personal information search services, including phone numbers, bank data, reservation data and even geolocation. The cost of such services starts from several dollars in cryptocurrency.
Services attract insiders from state structures, technological companies and banks. Recruiters publish ads with a promise of high payment and anonymity. In some cases, sources receive up to 10,000 dollars per day, using cryptocurrency to safely receive funds. In addition to earnings, the platform offers instructions for concealing operations.
The Black Data Market actively uses leaks from state databases storing information from citizens collected as part of the state observation system. Sources are also commercial databases and information received from employees of telecommunication companies, banks and security agencies. Access is offered for the largest state telecom operators: China Telecom, China Unicom and China Mobile.
The scale of data leaks is confirmed by experiments. Researchers tried to get information about Chinese officials and military through Telegram platforms and found their phone numbers, emails and other data. This emphasizes that even those who are part of the observation system become victims of abuse.
The Black Data Market in China demonstrates a paradox: a centralized control system created to monitor citizens turns against its creators themselves. This raises questions about the consequences of mass data collection without proper control and protection.