how cyber crime went professional - where can i buy a document camera

When Russian and Georgian soldiers threw explosive shells at each other, both sides of the South Ossetia conflict were also using the latest cyberattacks, using techniques honed by professional gangsters specializing in cybercrime.
While these attacks are largely untraceable, both sides are firmly pointing to each other.
Russia reported that Georgian hackers had destroyed the site of the South Ossetia government.
But Georgian institutions, including government departments and the National Bank, have also suffered a series of attacks.
The Georgian Foreign Ministry posted all the news on Poland's presidential website after president Mikhail saakashili's web page was replaced by photos of Adolfo Hitler.
Meanwhile, it is reported that the Russian-Russian news agency website is being locked and crashed.
This tactic is not just a political weapon.
The opening of the Beijing Olympics last week triggered a series of malicious Internet activities.
Some are relatively non-differentiated.
Using malware embedded on innocent websites, which are often news agencies that have an audience due to sports reports that infect visitors computers.
Some are more complicated.
Security company MessageLabs found a false email sent to at least 19 national sports organizations that allegedly had information about the Olympic media program, but actually, it carries a Trojan horse, controls the PC, and scans all files and networks to steal information.
Hacking, once a protected area for technology
Smart teenagers show off and become big business.
According to some estimates, organized crime accounts for the highest proportion of global GDP, and cyber crime is the fastest --
Part of it.
The attack became more precise as the perpetrators became more experienced.
"Targeted attacks against specific high-level groups have increased
Value information, whether it's a director of a company and its individual pension investment, or an attack company network that tries to acquire intellectual property (IP)
"Withdraw from the organization and move it to the developing world," said Chris Porter, partner at PricewaterhouseCoopers, a consulting firm.
The term cyber crime covers many sins.
Spyware can be embedded in the end user's computer using spam campaigns and infected web pages-
Monitor the keystrokes and steal anything from a single credit card detail to a lot of company data.
Alternatively, they can be used to recruit computers into a "botnet", a network of hijacked computers that can be used to launch more spam or to participate in a denial of service attackDoS)
The target is a website, bombing it with traffic until it crashes.
This is the case with the cyberwar in South Ossetia.
Graham Cluley, a senior consultant at security firm Sophos, explained: "The computers in Aunt Ethel's bedroom may now be working in cyber warfare . ".
"We are not sure if Russia attacked Georgia, or vice versa, or if the attacks were approved by the military, but, with governments blaming each other, there is clearly confusion going on.
"As Internet crime becomes specialized, it gives birth to a shadow economy worth as much as $ (£55bn)every year.
"The shadow economy is very similar to the real world economy," says Maksym Schipka, a senior architect at MessageLabs.
"Specialization promotes competition, high
High quality goods, and everything that makes the real world economy work.
"In this new market, different groups offer different services.
One creates malware, one collects and sells a list of target identities, one distributes viruses using a botnet rented from other places, and so on (
See panel, right).
Transactions often occur between criminals thousands of miles apart, in online forums and chat rooms, and it is relatively easy to find using internet search.
Using online payment systems such as eGold for payment is no different from legal transactions.
In some ways, in fact, the cyber-crime economy is closer to Adam Smith's original free-market concept because it is not subject to external price regulation, that is, taxes.
"The shadow economy is much more free than ours, so prices are only regulated by supply and demand," Mr Schipka said . ".
Despite the purity of its capitalism, the intent of most e-crimes is not complicated, and about 95 is designed for financial fraud and theft.
But, about for espionage, whether it's political or industrial, the technology used is
More refined, the pursuit of eternal
More specific goals
Usually senior management.
To a certain extent, this goal is an efficiency-driven result that will not appear in any market.
From the perspective of corporate espionage, the most promising recipient of infected mail may be an executive --
They have access to all systems of the company, and they are usually too busy to consider whether the incoming file is real or false before sending it.
Using complex programs, criminals selling identities can automatically search for "About Us" web pages and combine biographical information with email address formats, make a customized list of contact details for an executive at a certain level in a given geography or industry department.
But the most difficult attack is not economic motivation.
The most common goal is IP-
Rich industries such as financial services, defense and aerospace, can't find problems until competitors launch similar products, or governments in the developing world suddenly have better fighter planes.
"These are the most terrible problems because they are difficult to notice and may be found for many years," Mr Schipka said . ".
This method is very complicated and expensive.
A major aerospace group found that a clearly innocent Microsoft Word document sent to a senior executive contained a malware if the host ran a specific engineering computing program,
Once launched, it steals very specific, very technical information that can be used to design a new rocket, and then sends that information to an anonymous "drop" address.
"It is difficult to tell who paid the price for the attack, but the type of information stolen indicates that it will be worth hundreds of billions of dollars," Mr Schipka said . ".
"No one will be interested in this kind of data because there is nothing they can do about it.
"For law enforcement officers, the question is how to combat various technical crimes carried out by loose affiliates from multiple jurisdictions around the world, sometimes not detectable and often not reported.
The arrest last week of 11 people suspected of involvement in the theft of 100 million credit card details highlighted the difficulties: two Chinese, three Americans, three Ukrainians and one Estonian were charged, A Belarusian and a suspect known only to the online name Del Piero. -
Malware is the software that drives all types of cyber attacks from advanced espionage to basic theft. Off-the-
Shelf malware can be from $50 (£26)
According to the complexity of its goals, what kind of information it can get and what kind of security it can circumvent, $3,500.
You can also buy monitoring counter
The development of the virus and adjust your malware accordingly
$25 to $60 per month
Or quality service, so that it can not be detected. -
The next step is to find goals.
The basic list of unqualified email addresses is about 1/10 of the address;
A full identity, including the UK National Insurance number, may cost you $5 per piece.
Customized solution-
Executives in a certain region or industry-
Custom prices are expected to be paid. -
The next step is to use the "botnet" of thousands of innocent computers hijacked by hackers to send out the program.
The service can be purchased piecemeal, and it takes about $10 per million emails.
Or a botnet can be rented out for spam, hacking, denial of service attacks, or anything else you might think.
A reasonable hour.
The network size of 8,000 to 10,000 computers is about $200. -
The most common purpose is to steal credit card information.
A successful attack could generate 100,000 numbers in a week.
You can then take advantage of them yourself, or sell the list for 2 cents to 5 cents of the remaining balance on the online forum.
If the credit line for a regular credit card on your list is $1,000, the value of each set of details is about $25
Bring $2 m. -
A good way to convert the card number to cash is to buy the item online, usually an electronic product, and arrange delivery to the "delivery" address.
A minor who may or may not commit a crime, he receives the package and takes it elsewhere, usually a locker at the train station.
The last link is the person who collects the goods from all the drops and sells them at 70 per cent of their value --
Usually more than half of the resale value and the rest are returned to you. -
There is also a guarantee service if you are worried about buying your malware or selling your credit card list.
For 2 to 5% of the transaction value, the third party will host the goods and payment before verification.