14 Cybercrime

Introduction Early mainframe computers were stand-alone systems and were not interconnected. Security threats were limited to disgruntled or dishonest employees. continued on next slide

Introduction In 1981, IBM released personal computers. In the 1990s, the World Wide Web inter-connected these computers. Cybercrime involves either the computer as the target or as the means to commit the crime.

Internal Threats Internal threats come from employees and contractor's employees who have direct access to the employer's computer system. Dishonest employees are motivated by personal gain. Logic bomb is a program within a program that is destructive and acts based on a trigger event. continued on next slide

Internal Threats Exiting employees are those leaving their current employment voluntarily. Loyalty is shifting. Exit interview should be conducted to determine why the employee is leaving. Been known to take trade secrets and customer lists continued on next slide

Internal Threats Disgruntled employee is one who is motivated by striking back at their employer as the result of some real or imagined wrong. Motivation to get even

External Threats Hackers are intruders who enter into another's computer system without authorization. White Hat Hackers are motivated to test their skill against those who design a computer systems security features. continued on next slide

External Threats Black Hat Hackers are cyber-criminals and their motivation is to circumvent a computer security for personal gain or vandalism. continued on next slide

External Threats Viruses are malicious code that replicates itself and inserts copies in other programs. Worms are like viruses but spread with no human interaction after they are started. continued on next slide

External Threats Bot-nets are malware programs that allow remote users to control the computer. Economic espionage occurs when someone takes information for the benefit of someone other than the owner.

Fraud Internet allows for committing basic and complex frauds. FBI and BJA established the Internet Fraud Complaint Center. They receive a quarter million complaints a year, and an annual loss in excess of a half a billion dollars is reported.

Fraud Types Auto fraud FBI impersonation Seller keeps the money for the vehicle and never delivers the car. FBI impersonation Bogus inheritance, lottery winnings, and extortion continued on next slide

Fraud Types Scareware/Ransomware involves a pop-up message on the computer indicated that it has been infected with a virus, and the victim sends money to pay for a software to fix the problem. continued on next slide

Fraud Types Real estate/timeshare involves the victim sending money for a house or vacation and the place doesn't exist or information is used from the application to steal the identity. Romance scams involve the victim believing they are in a real relationship and the perpetrator faking the relationship to obtain money.

Identity Theft Identity theft involves the steal of a person's identity to obtain credit and buy merchandise without the intention of paying. Phishing involves the victim getting an email from a bank requesting verification and the victim providing the offender with personal information.

Child Pornography The first Amendment's protections of free speech do not apply to child pornography. Child pornography market increased dramatically with the advent of the Internet. Estimated over one million pornographic images of children on the Internet continued on next slide

Child Pornography Child pornography comes to the attention of investigators by: Informants Computer technicians Search incident to an arrest Chat rooms

Child Molesters Child molesters are constantly in search of new victims. Victims are primarily found via the Internet. Offender are adept at manipulation. Investigators pose as children in these chat rooms. Suspects can be arrested for arriving at a meeting place to meet the "child".

Contraband Sales Contraband is illegal goods and the Internet has spurred the sales of such items. Deep Web allowed users to access the Internet without divulging their identities. continued on next slide

Contraband Sales Onion Routing is what the system is called because of the many layers of encryption. Bitcoins is a form of unregulated Internet currency.

Terrorism Our critical national infrastructure is dependant on computer networks. This makes them targets for terrorism. To date, cyber terrorism has not happened in the United States. continued on next slide

Terrorism Cyber terrorism is inexpensive, less personal risk, wide variety of targets to chose, requires less training, and has potential to affect a large number of people. Hacktivism is not cyber terrorism. It is politically motivated and wants to protest and disrupt Internet functions.

Investigation Forensic examination is needed in cybercrime. Seizure of the electronics is the first step. Searches of electronics can be obtained through consent or a warrant. continued on next slide

Investigation Two methods to determine passwords Blunt force attack involves the use of software that systematically enters every combination of letters, characters, and numbers until the password is discovered. Success depends on the level of the password. continued on next slide

Investigation Two methods to determine passwords Social engineering which involves the critical observation of the environment where the targeted computer is located at the time of seizure. continued on next slide

Investigation The examination of the contents of the computers files would include: Internet history/favorites. Calendars. E-mail. Spreadsheets. Word documents. Picture files. Deleted files. continued on next slide

Investigation Forensic computer investigation should be conducted by someone who is well trained. The investigator should know the rules of evidence and be able to testify. Follow the chain-of-evidence procedures.