智联招聘三年两曝盗卖个人简历黑市价2元涨至5元

求职攻略 阅读(1908)
bwin官网开户

最近,据“中国消费者新闻”报道,北京朝阳法院第二次举办了“志联招聘”员工参与转售公民个人信息的案件。简历的售价约为5-6元,此案涉及公民个人信息超过160,000份。

中国经济网发现,这不是智联招聘员工第一次窃取客户简历。 2017年6月2日,志联招聘员工在北京朝阳区法院出售15万份简历。志联招聘大客户部门使用智联招聘网站系统漏洞销售沉某。 2016年3月至10月,在Li的客户服务Li的帮助下,该网站向Yu销售了超过155,000份简历。官方网站引用了50元的简历,它们的售价为2至2.5元人民币。

智联招聘也遭遇了漏洞。漏洞报告平台Wuyun.com于2014年12月3日披露了智联招聘的一个漏洞,涉及86万用户的简历信息披露。然而,志联招聘回应称,关于在云运网站上公布的涉嫌泄露信息的信息,标有招招招聘领域的简历信息,并非来自智联招聘。

智联招聘员工参与转载用户简历超过16万份,每股5-6元不等

据中国消费者新闻报道,7月5日,北京市朝阳区人民法院审理了一起“志联招聘”员工参与转售个人信息的案件。为了获得公民的简历信息,失业的郑某伪造了公司的营业执照,并提供给北京网络就业咨询有限公司北京分公司(“志联招聘”),卢某和王先生的工作人员。牟,获得了企业会员账号并获得了大量的公民简历,然后在淘宝上出售。该案件涉及160,000多名公民个人信息。

在5月6日和7月5日的两次审判之后,该案件并未在法庭上宣布。

据报道,被告卢某和王某是事件发生前“直连招聘”的员工。被告郑某是淘宝店主,在网上销售个人信息。 2018年,郑先生遇到了在“直连招聘”工作的陆某和王某,并开始从两个人那里购买简历。 “他们有一个便宜的包裹,一份4.5元的简历,一份2800份简历,”郑说。

记者从法庭了解到,郑某在审判时表示,一份4.5元的简历,他在淘宝网上提高了1元至1.5元的价格。最后,简历的价格约为5-6元。

根据“直联招聘”的正常信息销售流程,公司需要与“直联招聘”签订正式合同,并在批准生效后以企业账户的形式获取信息。卢某在审判中说,郑自称是一家猎头公司,需要大量的简历。因此,卢某通过该公司获得了60多家公司名称,并协助郑先生使用PS伪造假营业执照。郑将钱转到了吕某的个人微信或支付宝账户,然后卢被转移到公司的银行账户。

当检察官在法庭上询问他的执业是否符合“直连招聘”制度的要求时,卢说“领导告诉我,顾客会给钱。”但他也说他没有从中受益。另一位负责“直连招聘”的销售人员王先生说,他一开始并不知道郑某的营业执照。 “我只知道这是他的PS。”面对检察官“你提供的企业名称,郑将提供营业执照”是符合常识的,王先生说他没有考虑太多。

2017北京朝阳苑:志联招聘员工每人售出15万份简历,售价为2至2.5元

2017年6月2日,志联招聘的两名内部人员和采购信息人员在北京朝阳区法院受审。这些50元的简历仅以2元的价格私下出售,其销售额超过155,000。

据检查日报报道,由于招招招聘的销售部门,沉某使用了智联招聘网站的系统漏洞。 2016年3月至10月,在李的客户服务李的帮助下,该网站超过155,000。这份简历被卖给了北京一家科技公司的人事经理。

沉说,在销售期间,业绩压力非常大。如果绩效奖金不够,人们常常问他是否可以廉价出售简历。

“2016年3月,我发现该公司的程序存在缺陷,因此我以公司B的名义开始转让合同.Li在后台回复了电子邮件确认。之后,运营部门逐层批准了我截获了电子邮件审批结果并上传了截图。系统,转让合同生效,系统会生成用户名和密码。“沉告诉记者,他私下出售了包含几份简历的账号密码给客户以获取利润。

在Li帮助确认电子邮件的过程中,简历数量达到了10,000多个。 “前一个时期大约每周一次,而且几乎每天都在后期。”李承认“因为你不能抹去你的脸,你也想从中赚钱。”

每次收到简历时,沉将通过微信红包支付200元。 “后来觉得钱很小。我答应给他每1000份简历收取200元的福利费。”沉说,他已经赚了近50万元,李的利益费接近4万。

2014年:暴露泄露860,000名用户恢复信息直连招聘否认

据“北京青年报”报道,12月2日晚,志莲招募收到了来自乌云白帽的一封电子邮件,“天人无动于衷”。这封信提交了一个关于“引导860,000用户的简历信息披露”的漏洞。 12月3日上午,黑云网站正式宣布漏洞。从漏洞中可以清楚地看到姓名,地址,身份证号码,帐号,月薪等。与此同时,志联对漏洞的反馈是“无视”。

Zhaolian Recruitment said that after receiving the reminder from Wuyun, the technical department quickly conducted a check and confirmed that the IP address it points to is not a recruitment of Zhilian. At the same time, the suspected leaked information picture published on the Wuyun website is marked with the resume of the Zhaolian recruitment field. Information is by no means from Zhaopin. For this news, the personal users recruited by Zhaopin appear very calm, and some even post that "it is fake when the information is read, and the ID number is not correct."

As for the media to infer, the incident is likely to be Zhaolian recruitment has encountered the loss of the library, leaked information and was transferred to the recruitment site in this incident, and finally because the loopholes were discovered, Zhilian recruitment insisted that it is impossible.

According to the Jinghua Times, the black cloud said that it has confirmed that the IP address exposed in the loophole belongs to an emerging recruitment website. The website was found to have 860,000 resume data by White Hat, and all of the data were marked as recruited from Zhaopin. In the afternoon, the black cloud platform will delete the report.

Zhao Zhan, legal adviser of the China Internet Association Credit Evaluation Center, said that information theft and sale are illegal. A company or platform with a large amount of user information as a data management party must bear the legal obligation to protect user information, and it is liable for compensation for information leakage due to platform loopholes and “inner ghost” reselling.

The reporter asked where the IP address of the vulnerability was, and which of the emerging recruitment websites had security vulnerabilities. The recruitment of Wuyun and Zhilian was not disclosed. Some people in the online recruitment industry told reporters that in fact, there is a long-standing "black market" for resume trading on the Internet. One is the "inner ghost" of online recruitment websites. They steal website data and profit from external transactions. The other is line. The company or its HR department, informal online recruitment forums, etc. sell user information, indicating the source of authority or disguising the source of information for well-known companies or recruitment websites.

(Editor: Zhang Qianrong)

xx