Topic Centers

Cybercrime

print this page

Forensically Speaking

Consider it to be any crime that is committed using a computer, network, or hardware device. The computer or device may be the agent of the crime, the facilitator of the crime, or the target of the crime. The crime may take place on the computer alone or in addition to other locations.

There are two main types of cybercrime: “Type I” operates on a mass scale to achieve its margins, much like trawling the open sea; “Type II” is a focused one-on-one pursuit, more akin to angling. But rest assured that getting snagged is no foregone conclusion.

Getting a Positive I.D. on the Perp

Type I crimes tend to cast a wide and random net, and can include phishing, theft, or manipulation of data or services via hacking or viruses, identity theft, and bank or e-commerce fraud. It’s all about bulk: millions of bogus emails go out to the victims, some of whom will unknowingly download a Trojan horse which installs a keystroke logger on his or her machine. Alternatively, the victim might receive an email containing what claims to be a link to a known entity, but in reality is a link to a hostile Web site.

Type I crime is facilitated by crimeware programs such as keystroke loggers, viruses, rootkits, or Trojan horses. It is deeply opportunistic. Software flaws or vulnerabilities often provide the foothold for the attacker: e.g., criminals controlling a Web site may take advantage of a vulnerability in a Web browser to place a Trojan horse on the victim’s computer.

Type II, on the other hand, baits a hook, seeking to go one-on-one with its target. It includes, but is not limited to, activities such as cyberstalking and harassment, child predation, extortion, blackmail, stock market manipulation, complex corporate espionage, and planning or carrying out terrorist activities.

It results usually from an on-going series of events, involving repeated interactions with the target. A target may be contacted in a chat room by someone who, over time, attempts to establish a relationship. Eventually, the criminal exploits the relationship to commit a crime. Or, members of a criminal organization may use hidden messages to communicate in a public forum to plan activities or discuss money-laundering locations, for example.

It is usually facilitated by programs that do not fit under the classification crimeware. For example, conversations may take place using IM clients or files may be transferred using FTP.

Protect Yourself: Take Down the “Welcome” Sign

Most cybercrime is easy to avoid. Online criminals are trying to make their money as quickly and easily as possible. The more difficult you make their job, the more likely they are to leave you alone and move on to an easier target. The tips below provide basic information on how you can help deter online fraud.

• Keep your computer current with the latest patches and updates.
• Make sure your computer is configured securely.
• Choose strong passwords and keep them safe.
• Protect your computer with security software.
• Protect your personal information.
• Online offers that look too good to be true usually are.
• Review bank and credit card statements regularly.