Data has become a valuable new resource, and its leaks occur with the same frequency as on an old worn-out oil pipeline. To date, the drain of various databases (DB) has affected almost every resident of Russia. But do scammers always tell the truth, or are their databases a hoax?
Today, in this article, we will reveal methods for creating fake databases, find out how fake databases differ from real ones, and also talk about their possible use and goals.
Therefore, those who want to mislead everyone do not have any problems with creating fake databases. This is easy to do. But it is almost impossible to determine the reliability of the database without special analysis. After all, in most cases, sellers indicate only the file name and a small description to it. But there are a number of signs that experts may suspect and identify a fake.
If specialists have doubts about the authenticity of the database and there is such a possibility, then more detailed studies and checks are carried out. For example, checking data against real sources, analyzing the database structure, and verifying its integrity and reliability.
In addition to using automated software tools, experts pay attention to the discrepancy between information and reality and implausible data. For example, non-existent addresses, names, negative age values, or huge amounts of orders for all records.
Experts also pay attention to whether there is a link between individual data and a correlation between tables or records. If they are missing, it may indicate that the database was created without a real data source.
But this use of the database is rather an exception to the rule. More often, scammers become creators and users, and the databases themselves are used for criminal purposes. Below we will consider the most obvious ones.
And there are quite a lot of people who want to buy a database. Most often, these are low-level scammers — inexperienced carders, hackers, and others who want to gain access to illegally collected information for phishing or phone fraud. But there are also quite respectable buyers — microfinance organizations, commercial banks, insurance companies, advertising "engines" that use targeting, etc. They use the purchased databases for marketing, cold calls, spam mailings, getting information about competitors, and so on.
Another way to make money is to receive money from people whose data is allegedly located in the merged database. For example, during the pandemic, a fake database of citizens who bought fake certificates of vaccination and PCR appeared on shadow Internet resources. One of the scammers ' ways to earn money was to offer services to remove information about citizens who "bought" certificates from the database.
And often scammers sell an existing old database again on the darknet or closed TG channels under the guise of a new one.
Publishing offers for the sale of such databases can be considered as attempts to create an information guide. Hype can also help hackers increase their income.
A database drain always negatively affects the company's reputation. Although in Russia the issue of image risks is not as acute as in the West. In fact, even after large-scale database leaks at SDEK, TELE2, Russian Post, Yandex. For example, Alfa-Bank and other Russian companies, customers have not turned their backs on them. They made a lot of noise and were embarrassed, but they continued to use their cell phones, order food, and send packages. But this is from the point of view of ordinary customers of users.
If you look more broadly, the leak negatively affects the investment attractiveness of the company. In addition, there are large customers who will not be happy with the fact that their personal data is shared. For example, banks have VIP clients whose deposits make up the lion's share of the credit institution's capital. And if such customers leave, taking the money with them, the bank will suffer serious losses.
We hope that the introduction of turnover penalties, which will be introduced in the near future, will change the situation and affect the reduction of leaks. This means that there will be significantly fewer fake databases.
Today, in this article, we will reveal methods for creating fake databases, find out how fake databases differ from real ones, and also talk about their possible use and goals.
How fake databases are created and how they differ from real ones
There are only two ways to create a fake database:- Compilation of information that has already been made freely available. Cybercriminals can form a large base out of several smaller ones. They use open sources, social networks, data leaks, and other public information. And data leaks happen all the time. Everyone remembers Yandex plums.Food, Russian Post and from the latter — Alfa Bank. After the leak, the data is made publicly available and clever cybercriminals take advantage of it.
- Generating information. The generator of full names, passport numbers or SNILS can be easily written by any third-year student from a specialized department. Yes, and there are enough freely available tools for creating databases based on fictional information about people (for example, Random Data Tool, Factory_Bot_Rails, etc.).
Therefore, those who want to mislead everyone do not have any problems with creating fake databases. This is easy to do. But it is almost impossible to determine the reliability of the database without special analysis. After all, in most cases, sellers indicate only the file name and a small description to it. But there are a number of signs that experts may suspect and identify a fake.
If specialists have doubts about the authenticity of the database and there is such a possibility, then more detailed studies and checks are carried out. For example, checking data against real sources, analyzing the database structure, and verifying its integrity and reliability.
How to analyze fake databases
To perform the analysis, the database must be at least freely available. In this case, specialists use automated software tools to analyze the database. For example, search for changes in images using mathematical processing algorithms, search for metadata using exiftool, FOCA, or analogs.In addition to using automated software tools, experts pay attention to the discrepancy between information and reality and implausible data. For example, non-existent addresses, names, negative age values, or huge amounts of orders for all records.
Experts also pay attention to whether there is a link between individual data and a correlation between tables or records. If they are missing, it may indicate that the database was created without a real data source.
Why and who needs fake databases
The generated databases are necessary for developers to test applications-check functionality, performance, and security. This allows them to check their products without the risk of confidential information being leaked.But this use of the database is rather an exception to the rule. More often, scammers become creators and users, and the databases themselves are used for criminal purposes. Below we will consider the most obvious ones.
Making a profit
Money, one way or another, is the main motive of any criminal, because the price for a database can reach several million rubles. The cost directly depends on the completeness of confidential information. For example, a database with phone numbers, full names and cities of residence can be purchased from $200, a database of individuals of the Russian Federation-from $100. Prices depend on the number of rows in the database or the completeness of information. For example, a database containing your passport number, email, phone numbers, and home addresses may be charged $ 1-2 per line.And there are quite a lot of people who want to buy a database. Most often, these are low-level scammers — inexperienced carders, hackers, and others who want to gain access to illegally collected information for phishing or phone fraud. But there are also quite respectable buyers — microfinance organizations, commercial banks, insurance companies, advertising "engines" that use targeting, etc. They use the purchased databases for marketing, cold calls, spam mailings, getting information about competitors, and so on.
Another way to make money is to receive money from people whose data is allegedly located in the merged database. For example, during the pandemic, a fake database of citizens who bought fake certificates of vaccination and PCR appeared on shadow Internet resources. One of the scammers ' ways to earn money was to offer services to remove information about citizens who "bought" certificates from the database.
And often scammers sell an existing old database again on the darknet or closed TG channels under the guise of a new one.
Spreading disinformation
Cybercriminals may have customers who benefit from spreading misinformation in order to gain some kind of public response. For example, in 2023, fraudsters spread information about Jakob Sliv of the Public Services database to discredit state information systems. In the darknet, about 20 leaks appeared, allegedly related to the personal data of Russians. But none of them were real.Publishing offers for the sale of such databases can be considered as attempts to create an information guide. Hype can also help hackers increase their income.
Impact on reputation
Fake databases are often used to create and distribute false information in order to create a negative news background around the company. The goal is to ruin the company's reputation and image.A database drain always negatively affects the company's reputation. Although in Russia the issue of image risks is not as acute as in the West. In fact, even after large-scale database leaks at SDEK, TELE2, Russian Post, Yandex. For example, Alfa-Bank and other Russian companies, customers have not turned their backs on them. They made a lot of noise and were embarrassed, but they continued to use their cell phones, order food, and send packages. But this is from the point of view of ordinary customers of users.
If you look more broadly, the leak negatively affects the investment attractiveness of the company. In addition, there are large customers who will not be happy with the fact that their personal data is shared. For example, banks have VIP clients whose deposits make up the lion's share of the credit institution's capital. And if such customers leave, taking the money with them, the bank will suffer serious losses.
Conclusion
The personal data operators themselves are partly to blame for the appearance of fake databases. Currently, companies face a fixed and relatively small fine for leaking information — for legal entities from 60 thousand to 100 thousand rubles. Without fear of punishment, data is not properly monitored, and leaks occur even in the largest companies. Therefore, when scammers upload a fake database from a well-known bank or logistics company, no one is surprised.We hope that the introduction of turnover penalties, which will be introduced in the near future, will change the situation and affect the reduction of leaks. This means that there will be significantly fewer fake databases.
