Snowdrop Consulting Ltd. Cybercrime Update. By Dr Stephen Hill.

Transcription

1 Snowdrop Consulting Ltd Cybercrime Update By Dr Stephen Hill

2 Presenter Dr Stephen Hill Director of Snowdrop Consulting Ltd Former head of Fraud & Forensics Group in national accountancy firm Trustee Director of Fraud Advisory Panel Chair of the Fraud Advisory Panel Cybercrime Workgroup City of London Police ECD - online investigations consultant Honourable member of London Fraud Forum Steering Committee

3 The Growing Threats from Cybercrime

4 The Growing Threats from Cybercrime Vulnerabilities in the internet are being exploited aggressively not just by criminals but also by states Jonathan Evans Head MI5 Source:

5

6

7 Definition of Cybercrime "It is a criminal activity committed on the internet. This is a broad term that describes everything from electronic cracking to denial of service attacks that cause electronic commerce sites to lose money" On a simple level it deals with computer-related crime and the use of computers to commit crimes Cybercrime involves a variety of criminal activity using computer technology to commit crime

8 What is Cybercrime? Computer used to commit a crime Child porn, threatening Assuming someone s identity Sexual harassment, defamation Spam, phishing Computer as a target of a crime Viruses, worms Industrial espionage, software piracy Hacking & cracking

9 Traditional Criminal Techniques & Cybercrime High Tech Crime Operations

10 Cost of Cybercrime? Cyber/e-crime is estimated to cost the UK economy 27 billion a year [Cabinet Office & Detica, February 2011]

11 Cost of Cybercrime

12 Technological Development

13

14 Dark Net

15 Dark Net

16 Virtual Terrorist Networks

17 Source: Washington Post

18 Inspire Magazine

19 Inspire Magazine

20

21 LulzSec Source:

22 LulzSec Lulz Security abbreviated as LulzSec Lulz - Often used to denote laughter at someone who is the victim of a prank Sec - short for Security The group is alleged to consist of 6 members and has used the motto "Laughing at your security since 2011!" Claimed responsibility for several high profile attacks Sony Pictures CIA SOCA NHS News International Nintendo 20th Century Fox... Source:

23 LulzSec Source:

24 Source: LulzSec

25 LulzSec Reborn

26 Anonymous

27

28 Operation / Project Mayhem 2012 It is the BIGGEST Operation of Anonymous ever. Its a multi-layer project accomplished step by step There will be a big attack on 5th September and the final attacks starting at But Operation Mayhem 2012 is already initiated Operations like #opmegaupload, #oprevenge etc. have already succeeded... Source:

29 Downloads to Compromise Security

30 Social Engineering Human Error!

31 Phishing ( Scams) The fraudulent practice of sending s purporting to be from reputable companies in order to induce individuals to reveal personal information, such as passwords and credit card numbers, online. * Phishing is an example of social engineering techniques used to fool user Origin s: respelling of fishing, on the pattern of phreaking *

32

33 Directed to Fake Site

34 Increase in Abuse of the Web

35 London 2012 Scams

36 London 2012 scam in the making

37 London Olympics

38 Charity Scams

39 Web 2.0 Security Concerns Posting information online Answering questions online Automatic updates (e.g. from travel sites) Location services switched on Face-finder services...

40 Social Media Data Compromise

41 Cybercrime Risks What could happen threats? How bad could it be consequences? How often will it happen frequency? How sure am I of the answers to the first 3 questions? What is the degree of uncertainty?

42 Things to Consider Install firewalls onto your IT systems to prevent outside parties from gaining access to information Keep anti-virus and anti-spyware software up-to-date and download the latest security updates Use encryption to protect information contained in s or stored on laptops or other portable devices such as memory sticks or PDAs Stop unwanted Spam and delete any suspicious s - do not open links or attachments from senders you do not know Use strong passwords for online login and always ensure you are on a secure site before leaving any sensitive information (

43 Things to Consider Browse the Internet safely by using a secure web browser such as Firefox and always runs the updates when released Destroy old computers, backup tapes memory sticks etc using a specialist 'shredding' application or seek the services of a reputable third party contractor Use the privacy settings on social networks such as Facebook and use a strong password Clear out temporary Internet files, cache and history files (also monitor third party cookies) Secure wireless networks as unprotected Wi-Fi (wireless) networks are vulnerable...

44 WiFi Top tips for security Use a strong password & good wireless encryption Don t broadcast your SSID (Service Set IDentifier) Enable WPA2 (WiFi Protected Access) Restrict access by MAC address (filtering) Shut down the network when it s not being used Do Not Auto-Connect to Open Wi-Fi Networks Join the right network..!

45 Words of Wisdom? 1st Rule of Computer Security Don t buy a computer! 2nd Rule of Computer Security If you do don t turn it on! Dark Avenger legendary virus writer

46 Snowdrop Consulting Ltd Cybercrime Update By Dr Stephen Hill