InfoWorld: Secret Service cracks down on cybercrime

======================================================================== REALITY CHECK: EPHRAIM SCHWARTZ http://www.infoworld.com ======================================================================== Tuesday, March 8, 2005

SECRET SERVICE CRACKS DOWN ON CYBERCRIME

By Ephraim Schwartz

Posted March 04, 2005 3:00 PM Pacific Time

Last week, I spoke with Brian Nagel, assistant director of the Secret Service's Office of Investigations. The Secret Service is famous as the agency that provides bodyguards to the president -- at one time Nagel served in the Presidential Protective Division -- but both he and the agency do far more than that nowadays.

ADVERTISEMENT -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- INFOWORLD IT STRATEGY GUIDE: MANAGING ENTERPRISE ARCHITECTURE Effective system design is critical to integrating multiple platforms, applications and data sources. This InfoWorld IT Strategy Guide aids enterprise decision makers through the process of evaluating, selecting and implementing security, networking and application development resources. This comprehensive guide has a retail value of $195, but is available at no charge for a limited-time to InfoWorld readers via sponsorship by Remedy Magic. Download now. http://newsletter.infoworld.com/t?ctl=C12A72:353CA35 -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --

Along with the FBI, the Secret Service shares responsibility for investigating identity theft and computer fraud. The scary news from Nagel is that these crimes are no longer the work of individuals. Rather, criminals are organizing, hoping to leverage one another's capabilities in order to make more money.

These organizations aren't the crime families we know from movies and books, however. They're online communities.

While there are many ongoing investigations, one that Nagel was able to talk about was Operation Firewall, in which the Secret Service infiltrated and gained access to the Web site shadowcrew.com.

The ShadowCrew Web site was an online shopping bazaar for criminals. Participants from all over the world would log in to buy and sell credit card numbers and identity documents. For example, a man in Bulgaria looking for falsified documents was directed to a forger in Northern California. The site was also used for recruiting hackers and trading information on business sites with security holes.

The Secret Service found the ShadowCrew through an ordinary Google search using terms referring to stolen credit card numbers, and the agents gained the confidence of ShadowCrew's Web site administrator "through standard undercover methods," according to Nagel.

Because the goal of Operation Firewall is to prevent theft, the Secret Service didn't wait very long before shutting ShadowCrew down. Secret Service forensic agents, coordinating with foreign law enforcement agencies in six countries, targeted 30 top criminals interacting on the site and caught 90 percent of them in the first 40 minutes of their search. By the next morning they had the rest.

In total, there were about 4,000 criminals participating on the ShadowCrew site, Nagel says, adding that had the ShadowCrew continued operating, the estimated value of the thefts could have gone to $1 billion.

Working alongside the Secret Service and FBI with its own staff of investigators is the Business Software Alliance (BSA), an organization whose members include all the major ISVs, as well as hardware guys such as Dell, IBM, and Intel. BSA investigators funnel leads to law enforcement on software piracy, illegal spamming, and phishing attacks.

Robert Holleyman, president and CEO of BSA, pointed to a study his organization conducted with the Information Systems Security Association, which found that the top challenges in deploying security systems are budget, staffing, and employee awareness.

The Secret Service's Nagel warns that credit card numbers are becoming more readily available, as spoofing sites become more polished and authentic in both look and feel. He says that Operation Firewall has targeted many more people but that it may take as long as a decade to complete the operation.

Sad as it is to say, with security holes getting bigger and not smaller, my guess is that we will soon enter an era in which business desktops are tightly locked down and even personal e-mails are a thing of the past.

Ephraim Schwartz is an editor at large at InfoWorld.

======================================================================== Notes from an Insider Two ways to be an IT know-it-all: do it yourself, or just read "Notes From the Field" by InfoWorld columnist Robert X. Cringely. Read his column and get the latest inside scoop on computer industry gossip, information you can use to dazzle your colleagues and impress your friends. E-mailed to you every Tuesday. To subscribe, go to http://newsletter.infoworld.com/t?ctl=C12A6E:353CA35

ADVERTISE ======================================================================== For information on advertising, contact Elisabeth_raphel@infoworld.com.

UNSUBSCRIBE/MANAGE NEWSLETTERS ======================================================================== To subscribe, unsubscribe or change your e-mail address for any of InfoWorld's e-mail newsletters, go to: http://newsletter.infoworld.com/t?ctl=C12A6F:353CA35

To subscribe to InfoWorld.com, or InfoWorld Print, or both, or to renew or correct a problem with any InfoWorld subscription, go to http://newsletter.infoworld.com/t?ctl=C12A71:353CA35

To view InfoWorld's privacy policy, visit: http://newsletter.infoworld.com/t?ctl=C12A70:353CA35

Copyright (C) 2005 InfoWorld Media Group, 501 Second St., San Francisco, CA 94107

This message was sent to: GDEWILDE@GMAIL.COM