Information Center

Change data for free meal hackers to invade restaurant management system

  

In order to obtain a permanent "meal ticket" in a hotel, a "hacker" in Nanjing unexpectedly hacked into the hotel's catering management system to modify data and got himself an "unlimited" stored value card. When the hotel found something unusual, it called the police for help. The "red guest" of Nanjing Qinhuai police and the "hacker" of illegal crimes fought in the virtual world and successfully captured the suspect.

Found a card that will automatically recharge?

In June this year, the Hongwu Road Police Station of Qinhuai Branch of Nanjing Public Security Bureau received an alarm from a restaurant, and they found a very strange situation during the inventory of the hotel. There was a stored value card that would recharge itself. The hotel owner told the police that the card showed that 580 yuan had been spent in the hotel, but in fact, only 200 yuan had been recharged in the hotel. Although the hotel recharge is recorded by computer now, the boss also asked the staff to make a manual record, and found the problem after comparison.

Does this card recharge automatically? The owner of the hotel thought that the system was out of order and had overcharged the member. At first, when he wanted to contact the member by phone, something even more strange happened.

The original card requires registration of name and mobile phone number, but the hotel's food and beverage management system can not find the name of the owner of the card, nor the phone number, the only thing you know is the card number. The boss called the company that made the catering management software to inquire about the situation, and the reply was that the data of the system used by the hotel might have been tampered with.

Who can tamper with data? The boss was the first to suspect his employee, Mr. Li, because no one else touched the computer that handled the membership card. But after the investigation of Mr. Zhang, Mr. Li did not know about this. The boss had no choice but to call the police.

Police "Red Guest" Chases "Hacker" Online

The police computer expert "Hongke" decided to screen the entire software because he did not know his identity. The police investigated the consumption records of this stored value card and found that the card was used frequently, usually once or twice a week. From this, the police who handled the case speculated that the suspect would definitely come to the restaurant to spend money, so that the boss would pay attention to who used the card. At the same time, the police in plain clothes who patrolled nearby were arranged to stay near the restaurant.

Sure enough, on the fourth day when plainclothes police were stationed, the suspect went to this restaurant again for consumption. As soon as the guest took out the card to settle the bill, the clerk called the police at the police station, and the police immediately rushed to the scene to control the suspect.

The police found that the card used by the suspect was indeed somewhat different from other stored value cards in the store. There was no logo of the restaurant on it, just a whiteboard card with no number on it. The police tried to use this card to consume on the card reader. The card number showed the card with abnormal data, and the balance was 180 yuan. This balance does not match the balance of 38 yuan that the police have checked through the system. It is obvious that this card is automatically recharged again!

Invading the hotel system to save money

After investigation, the police learned that the suspect man's surname was Liu. When inquiring about the man's criminal record online, they accidentally found that Liu had been sentenced to one year's imprisonment by the court for the crime of destroying the information system. It turned out that Liu, who worked in the computer industry, was very good at cracking intrusion software databases. In the past, he was sentenced for invading other people's databases. This time, Liu invaded the database of the hotel and wanted to get a permanent free "meal ticket" just to save a few meals.

Liu told the police that he invades other people's databases on weekdays, but he just thinks it's fun. On the one hand, he can show his superb technology, and on the other hand, he does research to build his own database. Liu said that as long as the software used by the hotel is connected to the Internet, he can easily invade the system, just like playing. After he invaded the hotel database, he only changed the hotel's stored value card data. If he really wants to recharge the card, he needs to write the stored value information into this card. So Liu, who is proficient in this field, bought a card writer from the Internet and wrote the information into a blank card through the computer.

At present, Liu has been detained by the Qinhuai police according to law for forging and altering securities and vouchers.