News: 1711002733

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

Exposed: Chinese smartphone farms that run thousands of barebones mobes to do crime

(2024/03/21)


Chinese upstarts are selling smartphone motherboards – and kit to run and manage them at scale – to operators of outfits that use them to commit various scams and crimes, according to an undercover investigation by state television broadcaster China Central Television (CCTV) revealed late last week.

The report shows what appear to be chassis filled with 20 smartphone motherboards each, wired to a monitor that displays the screens of all 20 units. Also shown is a datacenter of sorts full of racks, each populated with several of the chassis and as many as 1,000 smartphones all hard at work.

The phones are each signed in to a unique account, and operators take care to change their IP addresses often – to evade detection by online platforms or regulatory authorities, [1]alleged CCTV.

[2]

That's because the phones are used for purposes such as posting fake comments or likes – some with SEO-boosting links – or placing fake orders on e-commerce sites.

[3]

[4]

Operators reportedly charge between RMB3,000 ($417) and RMB6,000 ($834) for a 20-smartphone system.

One manager of a facility that rents the barebones smartphones and accompanying services reportedly told CCTV that he does not know the identity of his clients – don't ask, don't tell is his preferred mode of business.

[5]

The broadcaster noted that this sort of phone farming is clearly illegal – it violates Article 53 of China's telecommunications regulations, which stipulates that telecom, radio and networking equipment that is connected to the public telecommunications network must comply with national standards and obtain a network access license.

[6]Britain enters period of mourning as Greggs unable to process payments

[7]Virgin Media sets up 'smart poles' next to cabinets to boost mobile network capacity

[8]When life gives you Lemon, sack him

[9]Judge demands social media sites prove they didn't help radicalize mass shooter

[10]Brits blissfully unbothered by snail-paced mobile network speeds

Chinese local media outlet [11]Jiemian News reported that major e-commerce platforms like Taobao and Poinduoduo have blocked search terms that would help buyers find phone farms, or the builders of the kit they run.

However, the miscreants can be found in other ways. Some even offer management software that allows screen mirroring, remote access to devices, and file transfers.

Others offer cloudy smartphones – to reduce dependence on hardware.

Some vendors are keen to present legitimate uses for their set-ups. One describes its group control technology as a game development and testing tool, as it can simulate multiple users.

[12]

Nonetheless, Jiemian News reported that among the businesses engaged in mobile phone motherboard-related business, over 23 percent have run into legal trouble – but fewer than three percent have faced administrative penalties. ®

Get our [13]Tech Resources



[1] https://mp.weixin.qq.com/s/aAEss31XCNAuDi517cUgnw

[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZfwTVBh0vpRzNWX4mDQOSgAAAVM&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZfwTVBh0vpRzNWX4mDQOSgAAAVM&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZfwTVBh0vpRzNWX4mDQOSgAAAVM&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZfwTVBh0vpRzNWX4mDQOSgAAAVM&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[6] https://www.theregister.com/2024/03/20/greggs_payments_meltdown/

[7] https://www.theregister.com/2024/03/19/virgin_media_says_smart_poles/

[8] https://www.theregister.com/2024/03/19/musk_lemon_interview/

[9] https://www.theregister.com/2024/03/19/social_media_sites_headed_to/

[10] https://www.theregister.com/2024/03/20/brit_mobile_habits/

[11] https://mp.weixin.qq.com/s/XaoKvClfs_u9tchOKhRHmQ

[12] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/cybercrime&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZfwTVBh0vpRzNWX4mDQOSgAAAVM&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[13] https://whitepapers.theregister.com/



1,000 smartphones all hard at work

abend0c4

Doesn't China require ID and registration to purchase a SIM card? It would seem difficult to manage this - and the subsequent top-ups - at scale.

Re: 1,000 smartphones all hard at work

Lord Elpuss

You don't need a SIM to post comments or place fake orders...

Re: 1,000 smartphones all hard at work

abend0c4

The thing is, you don't need a phone either - you can, in principle, do it with any computer. And if the only route to make the comment or place the order is via an app, there are plenty of cheap Android TV sticks and several phone emulators out there, too. I'm trying to work out the USP of this solution.

PS: Not my downvote.

Re: 1,000 smartphones all hard at work

cyberdemon

Presumably many things in China are app-only and have no web alternative, and the app is a slurpy one that will ban you if it thinks it's in a VM

That or when you have such cheap hardware and cheap hardware engineers, nobody thinks of running android in a VM

Also worth noting that these things probably have network via USB-C as well as power, video and input. So they don't all have to be on WiFi/cellular unless they need to be, to pick up a verification SMS message

Re: 1,000 smartphones all hard at work

An_Old_Dog

@Lord Elpuss: if they're just using the cellphones via wireless as web browsers, why bother? Why not just run a cloudy, low-spec, virtual PC for that?

Re: 1,000 smartphones all hard at work

AVR

Some of them are, according to the article. Perhaps there's some advantage to being clearly detected as a phone by web browsers, or perhaps racks of 20 cellphones is just a passing phase

Let's remember the real victims here

trevorde

All those smartphone motherboards who will never feel the loving embrace of a plastic shell; who are forced to work 24/7 in hot, cramped, overcrowded conditions; who will never see an Android system update in their miserable lives; who will be callously recycled when they are no longer useful. These are the real victims here.

Doctor Trousers

Could the advantage of using physical phones be to do with Google Safetynet verification, which would likely fail for Android apps running in a VM or in emulation?

JimmyPage

Only if it wasn't making money for Google.

MiguelC

On [1]John Oliver's recent show about pig butchering scams you could clearly see those data centres and their phone skeletons racks

[1] https://www.youtube.com/watch?v=pLPpl2ISKTg

Personally, I don't often talk about social good because when I hear other
people talk about social good, that's when I reach for my revolver.
-- Eric Raymond