cybercrime

Slide 1: 

Social Networking Cybercriminals Patty Hayes Bridgewater State University June 2011

Slide 2: 

500 million people connect and share on Facebook.

What do 500 million people share on Facebook? : 

What do 500 million people share on Facebook? Addresses Phone Numbers Dates of Birth Places of Employment What they like Where they go to school

Advertisers exploit this Information by targeting ads for a specific user based on their…. : 

Advertisers exploit this Information by targeting ads for a specific user based on their…. Location Age Interests Associations

Advertisers are not the only ones who are exploiting personal information. : 

Advertisers are not the only ones who are exploiting personal information.

Slide 6: 

The same information is also available to Cybercriminals.

Slide 7: 

“The massive amount of personal information online,coupled with the lack of user knowledge of how to secure this data … will make it far easier forcybercriminals to engage in identity theft and user profiling than ever before. --LA Times

Cybercriminals “mine” personal data from Facebook and other Social Networking Sites : 

Cybercriminals “mine” personal data from Facebook and other Social Networking Sites Name Location Date of Birth Workplace Social Networks

Data mining can be : 

Data mining can be Small scale One criminal looking at your profile Large scale Applications disguised as questionnaires

Slide 10: 

“This wealth of personal information on individuals enables cybercriminals to craft a targeted attack.” --MacAfee

Mined data can be used for : 

Mined data can be used for Phishing scams Identity theft Breaches into corporate networks As well as… Malware Adware

Slide 12: 

“Getting to know you” quizzes on Facebook contain questions that mimic the security questions used by banks: What is your father’s middle name? What was the name of your elementary school? Where did you go on your honeymoon?

Slide 13: 

Social Network friends can unknowingly give criminals the information they need to break into e-mail or bank accounts.

Malware and Adware distributed on Social Networks : 

Malware and Adware distributed on Social Networks Criminals create fake profiles and make friend requests. Unknowing friends accept the request and click on links which download malware or adware.

Large-scale corporate attack : 

Large-scale corporate attack Criminals gather enough personal information fool a user into downloading an e-mail attachment or click on a link Gain control of a user’s computer and access to a corporate network

Slide 16: 

It is believed that the 2011 RSA security breach was the result of a criminal gaining access to the corporate network through information obtainedon Facebook.

Cybercrime is being taken very seriously by the FBI : 

Cybercrime is being taken very seriously by the FBI Similar breaches could jeopardize national security Financial losses could be significant

Slide 18: 

The FBI has 1,000 specially trained analysts in 56 field offices around the country and in 39 foreign countries to help fight cybercrime.

Slide 19: 

“It is difficult to overstate the potential impact these threats pose to our economy, our national security, and the critical infrastructure upon which our country relies.” Gordon M. Snow Assistant Director, Cyber Division Federal Bureau of Investigation Statement Before the Senate Judiciary Committee, Subcommittee on Crime and Terrorism , Washington, D.C. April 12, 2011

This threat is expected to continue. : 

This threat is expected to continue.

Slide 21: 

MacAfee predicts that in 2011: Social networking Apple products Mobile devices will increasingly become targets for cybercriminals.

Slide 22: 

Also, MacAfee cautions that location-based websites and apps such as -- Foursquare -- Gowalla -- Facebook Places will be exploited by cybercriminals because they allow them to quickly see where their victims are.

Slide 23: 

According to the LA Times, social media connections will replace email as the primary method criminals use to distribute malicious code and links.

User education is key : 

User education is key The most sophisticated security system will not work if someone leaves the door open and lets a criminal in. Users need to be more discerning about what they share and with who Users need to be more critical when accepting friend requests and clicking on links

Net-security.org advises: : 

Net-security.org advises: “Embrace social networking, but educate staff: An established policy and education can help protect against attacks originating from social networking tools.” --http://www.net security.org/secworld.php?id=10468

Slide 26: 

“As online fraudsters become more sophisticated, the only real line of defense we have is a healthy dose of skepticism, online awareness, and the installation of appropriate security tools.” http://www.kikabink.com/news/social-networking-crime-on-the-rise/

Slide 27: 

Resources: http://latimesblogs.latimes.com/files/mcafee-threat-predictions-2011.pdf http://www.kikabink.com/news/social-networking-crime-on-the-rise/ http://www.net-security.org/secworld.php?id=10468 http://www.fbi.gov/news/testimony/cybersecurity-responding-to-the-threat-of-cyber-crime-and-terrorism http://www.technewsworld.com/story/72316.html

Slide 28: 

The end.