Junta Internet Trap
Junta Internet Trap. Thai police created fake Facebook App to get Thai net users’ info, target users trying to open blocked sites.
Thai police allegedly created fake applications to access the Thai Internet users’ personal information on Facebook if the users try to access blocked websites,
When users try to access a blocked websites, they are sometimes redirected to a landing page called “tcsd.info.” The web page would delude the users to get to a suspicious application on Facebook called “Login.” If users consented to the app, the users’ accounts were compromised.
The TCSD “Technology Crime Suppression Division Police”. There also appears on the web page the logos of the Information Communication Technology Ministry, the Royal Thai Police, the TCSD and the Central Investigation Bureau.
“Sorry for your inconvenience. The information you requested were blocked by the Central Investigation Bureau, the Royal Thai Police, and the Central Investigation Bureau.” It also gives the address of the TCSD, if users have questions.
The four suspicious buttons on the web page are “close,” “sign in with Facebook,” “sign in with Google,” and “sign in with Microsoft.”
If users clicked “close” and “sign in with Facebook,” they would be sent to the Facebook page which ask the users to grant permission to the application “Login” to access to the users’ email addresses and public profiles.
If users clicked “sign in with Google,” they would be redirected to a Google page which also ask the users to grant permission for the application “TCSD” to access same kind of information.
Image No.1 shows tcsd.info with “Close button” on the top right and “sign in with Facebook” at the bottom. Image No.2 shows the consent page for Facebook app “Login.” Image No.3 shows information user provided if they grants permission to the app.
The “close” buttons disappeared on Friday morning. However, the “Sign in with Facebook” button is still on the page. If users clicked it, they would be sent to a consent page for app called “TCSD,” which requests for same kind of information.