Cyber Crime The current threat to the UK Security Marking

UK Cyber Crime The cost of cyber crime to the UK ? What is cyber crime and what is cyber enabled crime ? The motivation behind cyber attacks. Who are the cyber criminals ? UK Law Enforcement Why you should engage with Law Enforcement Security Marking

Protect4 Pure Cyber

Protect5 What is Cyber Crime? Pure Cyber crime Can only be committed through the use of ICT. Cyber enabled crime Can be committed without technology but are assisted or escalated by the use of ICT.

What is Cyber Crime ? Harvesting of personal and business data to commit fraud (phishing, vishing, spear phishing, targeted malware) Targeted compromise of UK networked systems (network intrusion) Denial of Service to UK networked systems (DDoS, Ransomware) Blended attacks - Obfuscation of real attack (DDOS hiding malware attack/infection) Cyber crime enablers (compromised hosters, cybercrime-as-a-service)

Motivations – Pure Cyber Crime Child abuse images Political / Kudos Financial Reward

Who are the cyber criminals ? Anyone - The threat is global and due to the rise of the cyber service industry technical ability is no longer required. Fraud Organised Crime – Russia & former Soviet Union, Romania, West Africa, South East Asia. UK Organised Crime Hactivists – 'Anonymous', 'Lulzsec' UK 'Hackers' / 'Script Kiddies'

UK Law Enforcement The NCCU launched as part of the National Crime Agency on 7 th October 2013  Providing a highly specialised investigative response, nationally and internationally, to the most serious incidents of cyber crime.  Working proactively to eliminate and prevent opportunities for online criminality.  Assisting Law enforcement to take the lead in tackling cyber-enabled crime.  Building stronger partnerships with industry and supporting a transformational change in law enforcement’s mainstream cyber capabilities.

Current Response – the NCCU Strategic Tactical Operational

Challenges The internet Multi-jurisdictional Legislation Working with industry Skills in policing Competing priorities and sheer volume

Why you should engage with Law Enforcement – Operation Allendale On Saturday 20 th & Sunday 21st October 2012 a major Phishing attack against customers of Barclaycard and First Direct banks phishing sites created, tested and launched online from a server in France. 340 customers visited the sites and 35 accounts compromised. Reported to the Police Central e-crime Unit by Barclays investigators who identified an IP address at Park Plaza Hotel, London used to transfer money from victim accounts.

Operation Allandale - Investigation Working with the hotel, bank and card issuer police identified suspect Godday Sunday ETU staying at the hotel. 24/7 Surveillance operation against ETU who met with Inout CARAMAN and Adrian IORGOVEAN who had flown in from Romania to engage in London spending spree. All three arrested at the hotel on 29 th October and found logged on to a 'dirty' server in the US which was found to contain 73 million addresses and 240,000 phishing victims worldwide

Op Allandale - Suspects

Op Allandale – The Result All three convicted following a trial and sentenced to ETU (8yrs) CARAMAN (7yrs 2mths) IORGOVEAN (5yrs 7mths) imprisonment. Phishing attacks fell by 88% against the UK banking sector following arrests and 'bulk' attacks ended. Based on industry figures £59 million worth of fraud was prevented against UK victims. By working with Law Enforcement you can make a difference !!

OP PAGODE Intelligence received that Zeus Trojan controlled and spread from an address in Manchester. On-line server found at address and suspect Gary Kelly, logged on as admin Carding Forum with 7,995 registered members worldwide. 170,000 recovered UK credit cards

Op Pagode Ghostmarket.net the largest english language carding forum in the world Main organiser, Nicholas Webber ex-public schoolboy 18yrs old, deputy Ryan Thomas 17yrs old. Suspects spent over £40,000 each on lifestyle using compromised cards. Kelly’s ZeuS botnet operation ran over 15,000 infected computers in 159 countries harvesting over 4 million lines of personal information.

Nicholas Webber enjoying the fruits of his labour.

Nicolas Webber 5 Years Gary Kelly 5 Years Ryan Thomas 4 Years Shakira Ricardo 18 Mths Zeus Banking Trojan and GhostMarket Carding Forum

NCCU Contacts :- Industry referrals 24/7 NCCU on Via dedicated NCCU referral unit account - Industry Partnership Team – Simon Mills tel /