Dialing Back Abuse on Phone Verified Accounts
Dialing Back Abuse on Phone Verified Accounts
复制标题
遏制对电话验证帐户的滥用行为
DOI：
--
复制
发表时间：
2014
期刊：
影响因子：
--
通讯作者：
Damon McCoy
中科院分区：
文献类型：
--
作者：
Kurt Thomas;D. Iatskiv;Elie Bursztein;Tadek Pietraszek;Chris Grier;Damon McCoy
在过去十年中，以营利为目的的网络犯罪的增加已经产生了一个支持大规模滥用的整个地下生态系统，其中一个方面包括大量注册欺诈账户。在本文中，我们提出了一个为期10个月的logistics研究的基本技术和金融能力的罪犯谁注册电话验证帐户（PVA）。为了进行我们的研究，我们购买了4，695个Google PVA，并通过与Google的合作获得了300，000个Google PVA的随机样本。我们发现，不法分子肆无忌惮地滥用免费VOIP服务，以规避获得电话号码的预期成本，实际上破坏了电话验证。再加上来自印度和印度尼西亚的短命电话号码，我们怀疑这些号码与人工验证农场有关，这些因素的综合作用与Google PVA的市场价格下降30- 40%相关，直到Google惩罚经常滥用的运营商的验证。我们将我们的研究结果提炼成一组建议，用于任何执行电话验证的服务，并强调与PVA滥用相关的开放挑战。
In the past decade the increase of for-profit cybercrime has given rise to an entire underground ecosystem supporting large-scale abuse, a facet of which encompasses the bulk registration of fraudulent accounts. In this paper, we present a 10 month logitudinal study of the underlying technical and financial capabilities of criminals who register phone verified accounts (PVA). To carry out our study, we purchase 4,695 Google PVA as well as acquire a random sample of 300,000 Google PVA through a collaboration with Google. We find that miscreants rampantly abuse free VOIP services to circumvent the intended cost of acquiring phone numbers, in effect undermining phone verification. Combined with short lived phone numbers from India and Indonesia that we suspect are tied to human verification farms, this confluence of factors correlates with a market-wide price drop of 30--40% for Google PVA until Google penalized verifications from frequently abused carriers. We distill our findings into a set of recommendations for any services performing phone verification as well as highlight open challenges related to PVA abuse moving forward.