this is the real world not the virtual world alan batey detective sergeant northumbria police high...

26
This Is The Real This Is The Real World World Not The Virtual Not The Virtual World World Alan Batey Detective Sergeant Northumbria Police High Tech Crime Unit

Upload: clemence-richard

Post on 24-Dec-2015

219 views

Category:

Documents


0 download

TRANSCRIPT

This Is The Real WorldThis Is The Real WorldNot The Virtual WorldNot The Virtual World

Alan BateyDetective Sergeant

Northumbria Police High Tech Crime Unit

YEAR INVESTIGATIONS

1998 72

1999 76

2000 76

2001 101

2002 155

2003 234

2004 212

2005 277

2006 287

2007 310

2008 296

2008

MONTH NO' JOBSNO'

COMPUTERS

JANUARY 18 41

FEBRUARY 47 75

MARCH 29 61

APRIL 32 45

MAY 35 60

JUNE 23 23

JULY 16 23

AUGUST 18 77

SEPTEMBER 14 30

OCTOBER 25 49

NOVEMBER  23  40

DECEMBER  16  29

TOTAL 296 553

APRIL2009

OFFENCE NUMBER %

IIOC 8 25.0%

SEXUAL OFFENCES 2 6.3%

GROOMING 2 6.3%

THEFT 1 3.1%

FRAUD 3 9.4%

DRUGS 3 9.4%

MFH 1 3.1%

SOC IAL NETWORK 1 3.1%

INTERNET 0 0.0%

OTHER 11 34.4%

TOTAL 32 100.0%

MARCH 2009

OFFENCE NUMBER %

IIOC 15 45.5%

SEXUAL OFFENCES 1 3.0%

GROOMING 2 6.1%

THEFT 4 12.1%

FRAUD 5 15.2%

DRUGS 2 6.1%

MFH 0 0.0%

SOCIAL NETWORK 1 3.0%

INTERNET 0 0.0%

OTHER 3 9.1%

TOTAL 33 100.0%

More Demanding JobsMore Demanding Jobs

Transfer of money (theft)Transfer of money (theft) Affiliate crime Affiliate crime Theft of data Theft of data

Online Banking TheftOnline Banking Theft

CUSTOMER

BANK

LOG ON DETAILSPASSWORD ETC

CUSTOMER

BANK

LOG ON DETAILSPASSWORD ETC

REDIRECT

CUSTOMER

BANK

LOG ON DETAILSPASSWORD ETC

REDIRECT

BOTNETS

BANK

BOTNET

TRANSFERS £20,000 OR MORE

CUSTOMER

BANK

LOG ON DETAILSPASSWORD ETC

COMPUTER INFECTED WITH TORPIG TROJAN

CUSTOMER

BANK

LOG ON DETAILSPASSWORD ETC

COMPUTER INFECTED WITH TORPIG TROJAN

TORPIG IS CONTROLLED BY A VERY WELL ORGANISED AND PROFESSIONAL RUSSIAN INTERNET GROUP

Affiliate crimeAffiliate crime““We have just finished counting up and we have paid We have just finished counting up and we have paid

out £201,342 to affiliates that were subsequently found out £201,342 to affiliates that were subsequently found to be fraudulent to be fraudulent

and a further £215,413 had been sent out but and a further £215,413 had been sent out but subsequently the cheques were stopped. “subsequently the cheques were stopped. “

“ “A considerable extra amount was never converted A considerable extra amount was never converted into payments as we closed accounts. “into payments as we closed accounts. “

Affiliate Network

AffiliateWebsite Owner

End Merchant

( Woolworths)

Consumer

(Mr/Mrs Joe Public)

When secure data storage goes horribly wrong.

An overview of Operation Oakdale

ConclusionConclusion

Electronic process complicatedElectronic process complicated Too much human interventionToo much human intervention Lack of training in handling dataLack of training in handling data No formal method to track dataNo formal method to track data