Search This Blog
Powered by Blogger.

Blog Archive

Labels

About Me

Load More
Trendy Right Now

Popular Posts

Showing posts with label Law Enforcement. Show all posts
Law Enforcement
Africa Cyber Crime Cyber Operation Interpol Law Enforcement

Over 1,000 People Arrested by Interpol in Africa as it Cracks Down on Cybercrime

 

During a two-month operation to combat cybercrime that left tens of thousands of victims, including some who were trafficked, and caused millions of dollars in financial losses, Interpol detained 1,006 suspects across Africa, the international police agency said Tuesday. 

The agency said in a statement that Operation Serengeti, a combined operation with Afripol, the African Union's police agency, targeted criminals responsible for ransomware, business email breach, digital extortion, and online frauds, took place in 19 African countries between September 2 and October 31.

“From multi-level marketing scams to credit card fraud on an industrial scale, the increasing volume and sophistication of cybercrime attacks is of serious concern," stated Valdecy Urquiza, the Secretary General of Interpol. 

Local law enforcement and business sector partners, including internet service providers, were instrumental in the investigation, according to Interpol, which identified 35,000 victims and related cases to international financial losses of nearly $193 million. 

In a case involving online credit card theft that resulted in losses of $8.6 million, Kenyan police made around two dozen arrests. Eight individuals, including five Chinese nationals, were arrested by police in Senegal, a country in West Africa, for involvement in a $6 million online Ponzi scheme.

Chelba stated that Afripol's attention is now on new threats such as AI-driven malware and advanced cyberattack strategies. Other demolished networks included a Cameroonian organisation suspected of using a multi-level marketing fraud for human trafficking, an Angolan international criminal cell operating an illegal virtual casino, and a Nigerian cryptocurrency investment scam, according to the agency. 

Interpol, which has 196 member nations and celebrated its centenary last year, helps national police forces communicate with one another and seek down suspects and offenders in domains such as counterterrorism, financial crime, child pornography, cybercrime, and organised crime. 

The world's largest, if not best-funded, police organisation has faced novel challenges, including an increase in cybercrime and child sex abuse cases, as well as rising tensions among member countries. Interpol had a total budget of about 176 million euros (about $188 million) last year, compared to more than 200 million euros at Europol, the European Union's police agency, and approximately $11 billion at the FBI in the United States.
Read more »
Threat Intelligence
Cyber Security Law Enforcement Ransomware ransomware attacks Threat Intelligence

Law Enforcement From Thirty Nine Nations Team Up to Tackle Ransomware Attacks

 

Ransomware continues to pose significant issues for businesses and organisations around the world, and with attacks on the rise, the UK and 38 other nations have joined forces with international cyber insurance authorities to create new guidelines aimed at bolstering resilience and providing help to victims.

The new guidance will advise ransomware victims to carefully evaluate all options before making payments, as data restoration and malware eradication are not guaranteed even if the ransom is paid, and hackers are just encouraged to continue. 

Instead, firms are advised to create a thorough response architecture in the case of an attack, that includes regulations and contingency plans. If an organisation is targeted, the policy suggests reporting the attack to law police and consulting with security professionals. 

Global crackdown 

With an expected $1 billion lost to ransomware attacks in 2023, ransomware is a lucrative business for criminals. But the new regulations aim to undercut the ransomware playbook and, if at all possible, stop future attacks by removing the incentive for attackers. 

“Cyber criminality does not recognize borders. That is why international co-operation is vital to tackle the shared threat of ransomware attacks. This guidance will hit the wallets of cyber criminals, and ultimately help to protect businesses in the UK and around the world”, stated Security Minister Dan Jarvis.

The United Kingdom is eager to lead the collaborative approach to combating cybercrime, so three major UK insurance bodies (the Association of British Insurers, the British Insurance Brokers' Association, and the International Underwriting Association) have joined forces to launch co-sponsored guidance for businesses. 

The UK National Crime Agency recently sanctioned 16 members of the 'Evil Corp' cybercriminal outfit, which is responsible for stealing more than $300 million from critical infrastructure, healthcare, and government organisations worldwide.

“Ransomware remains an urgent threat and organisations should act now to boost resilience," noted Jonathon Ellison, NCSC Director for National Resilience. “The endorsement of this best practice guidance by both nations and international cyber insurance bodies represents a powerful push for organisations to upgrade their defences and enhance their cyber readiness. "

“This collective approach, guided by last year’s CRI statement denouncing ransomware and built on guidelines from the NCSC and UK insurance associations earlier this year, reflects a growing global commitment to tackling the ransomware threat.”
Read more »
Law Enforcement
Chinese espionage Christopher Wray Cyber Security domestic terrorism FBI international terrorism Law Enforcement

FBI Director Christopher Wray Highlights Unprecedented Threat Landscape and Importance of Law Enforcement Partnerships

 

FBI Director Christopher Wray emphasized the unprecedented level of diverse threats facing the nation, describing it as a time when multiple threats are simultaneously elevated, a situation he finds unparalleled in his career. In an exclusive interview during his visit to the FBI’s Minneapolis field office, Wray highlighted the importance of partnerships among law enforcement agencies and other entities as they navigate challenges ranging from domestic and international terrorism to Chinese espionage, intellectual property theft, and foreign election interference.

Wray expressed concern about the cumulative impact of these threats and the burden they place on law enforcement, noting that collaboration across agencies is crucial for overcoming these challenges. His concerns have been consistent, particularly following the October 7th Hamas attack in Israel, which he warned could inspire extremist activities similar to those seen during ISIS's rise.

The FBI is also grappling with security issues related to the southern U.S. border, where individuals with alleged ties to the Islamic State were detained in June for immigration violations. Additionally, the agency is addressing foreign interference in U.S. elections, with recent incidents involving Iranian cyberattacks on political campaigns.

While Wray refrained from discussing specific investigations, he underscored the necessity of public-private partnerships in combating cyber threats, particularly those targeting election systems. He stressed the importance of information sharing to effectively connect the dots and address these complex challenges.

Wray also noted the rising violence against law enforcement officers, pointing out the troubling statistic of an officer being killed every five days, with four such deaths occurring in Minnesota alone in 2024. The FBI itself has not been immune to such violence, as demonstrated by a fatal encounter at its Cincinnati office following the Mar-a-Lago search.

In response to these growing threats, the FBI has strengthened its traditional partnerships with state and local law enforcement while also forging new collaborations with businesses and academic institutions. These efforts aim to bolster cybersecurity and protect intellectual property, with a particular focus on leveraging artificial intelligence to counter AI-enabled threats. Wray emphasized that AI, when used effectively, could be a powerful tool in defending against the misuse of technology by adversaries.
Read more »
User Privacy
Data Breach Data Safety Illegal spying Law Enforcement United States User Privacy

Law Enforcement is Spying on Thousands of U.S. Citizens' Mail

 

The Washington Post reported on Monday that federal law enforcement authorities have long received information about certain Americans' mail via a little-known U.S. Postal Service operation known as the "mail covers program.” While officials argue that the program is solely used to investigate criminal activities, it appears to be widely used, with some Americans claiming to have been targeted by the program despite having done nothing unlawful. 

The mail covers program prevents outside agencies from opening a person's mail, but it does allow them to look at the information printed on the outside of letters and packages. According to a previously leaked program document, a "mail cover" is an "investigative tool employed to record data appearing on the outside of a mailpiece." For obvious reasons, this could still provide quite a lot of information regarding an individual under surveillance. 

The FBI, IRS, Department of Homeland Security, and the Postal Service's own investigative department, the United States Postal Inspection Service, have all requested information. However, the Washington Post claims that "state and local police forces" have also used the program. The good news for investigators—and the bad news for the rest of us—is that accessing the contents of the mail label is not subject to a judge's approval or a court order.

How often is the program used? The answer is quite a lot. A recent audit of the program revealed that the Post Office authorised more than 158,000 information requests over a four-year period. Meanwhile, recent information provided to legislators who were intrigued about the programme revealed that police agencies made "an average of about 6,700 requests per year," the Post writes. Those same legislators, including Ron Wyden (D-Ore.) and Elizabeth Warren (D-Mass.), have taken it upon themselves to ask for further transparency and better controls on the program. 

The program pales in comparison to another well-known mail-tracking program, Mail Isolation Control and Tracking, which is believed to photograph the exteriors of every item of mail that passes through the United States Postal Service. This program is allegedly designed for routing and organisation, but it can also be utilised for law enforcement purposes.
Read more »
MHA
CBI Cyber Crime Digital Arrest Fraud Calls Law Enforcement MHA

Watch Out for Cyber Scams Impersonating Police



The Ministry of Home Affairs (MHA) has raised an alarm regarding a spike in cybercrime, where fraudsters impersonate law enforcement officers to extort money from unsuspecting victims. Collaborating with Microsoft, the Indian Cyber Crime Coordination Centre (I4C) has already taken action against over 1,000 Skype IDs associated with such fraudulent activities.

In a recent statement, the MHA cautioned the public against a sophisticated online scam staged by international syndicates. These criminals, masquerading as police personnel or representatives of agencies like the Central Bureau of Investigation (CBI) and the Reserve Bank of India (RBI), target individuals with false accusations of involvement in illegal activities or accidents. Subsequently, they demand payment to avoid legal consequences or secure the release of reportedly detained family members.

The way these fraudsters map out this course of action involves contacting victims and claiming that they have received or are about to receive a parcel containing illicit items such as drugs or fake passports. In some cases, they coerce victims into participating in simulated "digital arrests," where they are forced into appearing on video calls, lending an air of authenticity to the ruse. To support their credibility, these criminals operate from mock police stations and government offices, donning uniforms to deceive their targets.

Instances of individuals falling victim to these scams and losing significant sums of money have been reported across the country. The MHA emphasised that this form of organised cybercrime poses an unprecedented threat and is perpetrated by transnational criminal networks.

The I4C, established under the MHA's purview, serves as the focal point for combating cybercrime in India. Through its Citizen Financial Cyber Fraud Reporting and Management System (CFCFRMS), the I4C has intercepted and safeguarded over ₹600 crore from falling into the hands of online fraudsters. This online platform enables rapid reporting of financial cybercrimes, facilitating coordinated action among law enforcement agencies and financial institutions nationwide.

The MHA underscored its collaboration with various ministries, regulatory bodies like the RBI, and other stakeholders to counteract these fraudulent activities. Additionally, the I4C extends technical support and guidance to state and union territory police forces for identifying and investigating cybercrime cases.

To address this issue effectively, the I4C, in partnership with Microsoft, has initiated measures to block Skype IDs, SIM cards, mobile devices, and mule accounts used by cybercriminals. Furthermore, through its social media platform "Cyberdost," the I4C disseminates informational materials, including infographics and videos, to raise awareness and empower citizens to recognise and report cybercrimes promptly.

Given the delicate state of these scams, the MHA urges citizens to remain vigilant and promptly report any suspicious calls or online activities to the designated cyber crime helpline (1930) or the official website (www.cybercrime.gov.in) for assistance and intervention. By fostering a culture of awareness and heedful reporting, individuals can play a critical role in safeguarding themselves and their communities against cyber threats.


Read more »
sensitive files
confidential documents Data Breach Data protection data security European Union Europol Investigation Law Enforcement Personal Information Security Breach sensitive files

Sensitive Documents Vanish Under Mysterious Circumstances from Europol Headquarters

 

A significant security breach has impacted the European Union's law enforcement agency, Europol, according to a report by Politico. Last summer, a collection of highly confidential documents containing personal information about prominent Europol figures vanished under mysterious circumstances.

The missing files, which included sensitive data concerning top law enforcement officials such as Europol Executive Director Catherine De Bolle, were stored securely at Europol's headquarters in The Hague. An ongoing investigation was launched by European authorities following the discovery of the breach.

An internal communication dated September 18, revealed that Europol's management was alerted to the disappearance of personal paper files belonging to several staff members on September 6, 2023. Subsequent checks uncovered additional missing files, prompting serious concerns regarding data security and privacy.

Europol took immediate steps to notify the individuals affected by the breach, as well as the European Data Protection Supervisor (EDPS). The incident poses significant risks not only to the individuals whose information was compromised but also to the agency's operations and ongoing investigations.

Adding to the gravity of the situation, Politico's report highlighted the unsettling discovery of some of the missing files by a member of the public in a public location in The Hague. However, key details surrounding the duration of the files' absence and the cause of the breach remain unclear.

Among the missing files were those belonging to Europol's top executives, including Catherine De Bolle and three deputy directors. These files contained a wealth of sensitive information, including human resources data.

In response to the breach, Europol took action against the agency's head of Human Resources, Massimiliano Bettin, placing him on administrative leave. Politico suggests that internal conflicts within the agency may have motivated the breach, speculating on potential motives for targeting Bettin specifically.

The security breach at Europol raises serious concerns about data protection and organizational security measures within the agency, prompting an urgent need for further investigation and safeguards to prevent future incidents.
Read more »
Ransomware
Cyber Crime Cybersecurity Law Enforcement LockBit ransomware group Ransomware

Law Enforcement Strikes Blow Against LockBit Ransomware Group

 



Marking a pivotal moment, the FBI and the U.K.'s National Crime Agency have scored a significant victory by gaining control of LockBit, a widely feared ransomware group. Their operation targeted LockBit's main website, the platform through which the group pressured victims into paying large ransom amounts. Instead of the original links leading to victims' data, authorities redirected users to press releases, sanctions details, and decryption information. This move marks a crucial step in the fight against cybercrime, as law enforcement takes bold actions to dismantle the operations of a prominent ransomware threat.

In a bold psychological manoeuvre, the law enforcement agencies hinted at having information about the leader of LockBit, known as "LockBitSupp." Although the reveal on Friday did not disclose the identity, authorities claimed to know who LockBitSupp is, where he resides, and his financial worth. Notably, they suggested that LockBitSupp has engaged with law enforcement, sparking intrigue about the nature of their interaction.

Experts suggest that this strategic messaging aims to undermine trust within the cybercrime community, particularly among LockBit's affiliates. By creating doubt and suspicion, law enforcement seeks to disrupt LockBit's operations and provoke a response from its leader. The approach appears tailored to the confident persona of LockBitSupp, who had previously offered a $10 million reward for anyone revealing his identity.

Cybersecurity analysts, including Jon DiMaggio of Analyst1, emphasize the psychological aspect of this operation, aiming to erode trust among cybercriminals and make them less likely to collaborate with LockBit. The strategy seems designed to target LockBitSupp's confidence and reputation.

Kurtis Minder, CEO of GroupSense and a ransomware negotiator, suggests that the messaging campaign might intentionally provoke LockBitSupp to say something incriminating. By insinuating collaboration between LockBitSupp and law enforcement, authorities seek to create distrust among affiliates who rely on LockBit's services.

Law enforcement's tactics also extend to the public relations realm, recognizing the need to win a battle against cybercriminals who have historically operated with impunity. By seizing the LockBit website and using it to disseminate information harmful to the criminal enterprise, authorities aim to turn cybercriminals' tools against them.

Allan Liska, a threat intelligence analyst at Recorded Future, highlights two possible interpretations of the police message about communication with law enforcement. It could suggest that LockBitSupp is an informant, a claim previously made by rival ransomware gangs. Alternatively, law enforcement might have infiltrated LockBitSupp's inner circle, with LockBitSupp unknowingly sharing sensitive information.

In the ongoing fight against online crime, law enforcement recognizes the importance of delivering impactful disruptions. By taking control of LockBit's infrastructure and using it to expose the group's activities, authorities aim to make their actions more marketable and showcase their effectiveness in combating cybercrime.

This event strongly implies a shift in law enforcement's approach, using strategic messaging and website seizures to not only disrupt criminal operations but also to sway public opinion and instil doubt within the cybercriminal community. The battle against ransomware continues, with authorities employing innovative tactics to bring cybercriminals to justice.


Read more »
Technology
AAP AI Artificial Intelligence cryptocurrency scams cyber literacy Cybersecurity Experts Fraudsters Law Enforcement online financial scams Pacific Islands Social Media Technology

Analysis: AI-Driven Online Financial Scams Surge

 

Cybersecurity experts are sounding the alarm about a surge in online financial scams, driven by artificial intelligence (AI), which they warn is becoming increasingly difficult to control. This warning coincides with an investigation by AAP FactCheck into cryptocurrency scams targeting the Pacific Islands.

AAP FactCheck's analysis of over 100 Facebook accounts purporting to be crypto traders reveals deceptive tactics such as fake profile images, altered bank notifications, and false affiliations with prestigious financial institutions.

The experts point out that Pacific Island nations, with their low levels of financial and media literacy and under-resourced law enforcement, are particularly vulnerable. However, they emphasize that this issue extends globally.

In 2022, Australians lost over $3 billion to scams, with a significant portion involving fraudulent investments. Ken Gamble, co-founder of IFW Global, notes that AI is amplifying the sophistication of scams, enabling faster dissemination across social media platforms and rendering them challenging to combat effectively.

Gamble highlights that scammers are leveraging AI to adapt to local languages, enabling them to target victims worldwide. While the Pacific Islands are a prime target due to their limited law enforcement capabilities, organized criminal groups from various countries, including Israel, China, and Nigeria, are behind many of these schemes.

Victims recount their experiences, such as a woman in PNG who fell prey to a scam after her relative's Facebook account was hacked, resulting in a loss of over 15,000 kina.

Dan Halpin from Cybertrace underscores the necessity of a coordinated global response involving law enforcement, international organizations like Interpol, public awareness campaigns, regulatory enhancements, and cross-border collaboration.

Halpin stresses the importance of improving cyber literacy levels in the region to mitigate these risks. However, Gamble warns that without prioritizing this issue, fueled by AI advancements, the situation will only deteriorate further.
Read more »
Subscribe to: Posts (Atom)