More than 100 Chinese loan applications diverge in financial data from users

In China, more than 100 loan applications disclose user data, including contact information, financial information and even site data. This information is contained in a previously discovered 889 GB database Anurag SenWho is the head of the company's research team Detective Security Proficient in antivirus software review.

Anurag Sen said the database contained leaked data from more than 4.6 million devices, and that whenever a person uses any of these applications, additional information is collected. The ability to track the current position of a person via this database is more worrisome because latitude and longitude are recorded each time a user logs on to one of these applications.

The database is hosted on servers managed by Aliyun Computing, a subsidiary of Alibaba. However, the researcher stated that the company was neither involved nor responsible for the diversion. Some sites have received snapshots of the information included in the database disclosed and appear authentic.

Anurag Sen believes that a single marketing agency for mobile applications could be responsible for the infusion. But we still do not know how and why the agency transmits data.

These applications also contain other sensitive information, such as loan records, details, risk management data, transaction details, and personal information. In addition, it contains user hardware information, including a detailed list of contacts, SMS records, IMEI numbers, stored application data, and data in memory.

SafteyDetective stated that all this data can be used to steal the identity of someone:

There is more than enough detail to imitate someone completely without any effort. If these data are sold on the dark Web, they will be easily exploited as part of a "transaction" in which the financial, medical and personal life of the individual is taken. When you're targeted, you can get a new version of your phone's SIM card and almost complete access to all the apps installed on the target person's phone, which can allow you to control your smart devices, devices, and devices. access photos, special details, etc.

There are not yet details about the owner of the database. Alibaba has been contacted for further details and we will update the publication accordingly.