When users try to access a blocked website, they are sometimes redirected to a landing page called “tcsd.info.” The web page would delude the users into navigating to a suspicious application on Facebook called “Login.” If users consented to the app, the users’ accounts were compromised.
TCSD is the abbreviation of the Technology Crime Suppression Division Police. There also appear on the web page the logos of the Ministry of Information and Communication Technology, the Royal Thai Police, the TCSD and the Central Investigation Bureau.
“Sorry for the inconvenience. The information you requested is blocked by the Central Investigation Bureau, the Royal Thai Police, and the Ministry of Information and Communication Technology.” It also gives the address of the TCSD, if users have questions.
The four suspicious buttons on the web page are “close,” “sign in with Facebook,” “sign in with Google,” and “sign in with Microsoft.”
If users clicked “close” or “sign in with Facebook,” they would be sent to a Facebook page which asks the users to grant permission for an application called “Login” to access the users’ email addresses and public profiles.
If users clicked “sign in with Google,” they would be redirected to a Google page which also asks the users to grant permission for an application called “TCSD” to access same kind of information.
Photo courtesy of the Thai Netizen Network
After the Thai Netizen Network, a NGO campaigning for Internet freedom, reported this on Thursday night, the “close” button disappeared on Friday morning. However, the “Sign in with Facebook” button is still on the page. If users clicked it, they would be sent to a consent page for the app called “TCSD,” which requests same kind of information.
In late May, Pol Maj Gen Pisit Paoin, head of the junta-appointed working group responsible for censoring the internet, told Thai media that the Ministry plans to spy on popular social media and chat applications in order to identify and arrest people who spread illegal content.
“We’ll send you a friend request. If you accept the friend request, we’ll see if anyone disseminates information which violates the National Council for Peace and Order (NCPO) orders,” the police said. “Be careful, we’ll soon be your friend.”